General

  • Target

    12e1259f06fdfa6edf1ec8b720bc1396ded2fc4c4d433ffde9ca5ad0cf0e51ab.exe

  • Size

    104KB

  • Sample

    241123-q9csfswlas

  • MD5

    6eabfaaa9b900c96a22d2ba41d49e76a

  • SHA1

    324745655b9c18a93b198c0121ccfdaf16986211

  • SHA256

    12e1259f06fdfa6edf1ec8b720bc1396ded2fc4c4d433ffde9ca5ad0cf0e51ab

  • SHA512

    7a5852c0e35961a587a9edaf23f043d7df9cb4d550830a46366c883ec3ba6736e06ae5aeeaa96d643258336c30ad646aef04444f964fb5672585793f60d446b1

  • SSDEEP

    3072:OZUKsQbLjlp5qEWqzTjAZ+k7nGjPzhIJvA9C:FwbLjlp5qEWgAZbf+w

Malware Config

Extracted

Family

redline

Botnet

@kissyt

C2

45.137.190.237:27973

Attributes
  • auth_value

    90a7f02f0cbc48c0c8632519fbd10c4b

Targets

    • Target

      12e1259f06fdfa6edf1ec8b720bc1396ded2fc4c4d433ffde9ca5ad0cf0e51ab.exe

    • Size

      104KB

    • MD5

      6eabfaaa9b900c96a22d2ba41d49e76a

    • SHA1

      324745655b9c18a93b198c0121ccfdaf16986211

    • SHA256

      12e1259f06fdfa6edf1ec8b720bc1396ded2fc4c4d433ffde9ca5ad0cf0e51ab

    • SHA512

      7a5852c0e35961a587a9edaf23f043d7df9cb4d550830a46366c883ec3ba6736e06ae5aeeaa96d643258336c30ad646aef04444f964fb5672585793f60d446b1

    • SSDEEP

      3072:OZUKsQbLjlp5qEWqzTjAZ+k7nGjPzhIJvA9C:FwbLjlp5qEWgAZbf+w

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks