General

  • Target

    767101d80bdc07b437efdf837f58cfa85e73dcc1e3bbb6814f888536bd59da12.exe

  • Size

    839KB

  • Sample

    241124-ansnsatrey

  • MD5

    9addc320bb3b89422541a70e26f1879b

  • SHA1

    b4f96a50d61faaf61325f0288e02db97447529fe

  • SHA256

    767101d80bdc07b437efdf837f58cfa85e73dcc1e3bbb6814f888536bd59da12

  • SHA512

    3e6e51998ef55ffe532f5c72138efeb40a7f47cffc19c38ee51c756bd96cc131ec2cabf95f26cf441d3875c6b862d685e4733197b81460506e54a7a177c1775f

  • SSDEEP

    12288:YL7CSb2gLre1WYMEUSILvWdbGSexg+rrMgpAz47kDLj/BRsDklNsS6:27rPfeECUbLAneq06uk/j5Rs4lWS6

Malware Config

Extracted

Family

redline

Botnet

@F1gaSebe

C2

95.181.152.6:46927

Attributes
  • auth_value

    cdf3919a262c0d6ba99116b375d7551c

Targets

    • Target

      767101d80bdc07b437efdf837f58cfa85e73dcc1e3bbb6814f888536bd59da12.exe

    • Size

      839KB

    • MD5

      9addc320bb3b89422541a70e26f1879b

    • SHA1

      b4f96a50d61faaf61325f0288e02db97447529fe

    • SHA256

      767101d80bdc07b437efdf837f58cfa85e73dcc1e3bbb6814f888536bd59da12

    • SHA512

      3e6e51998ef55ffe532f5c72138efeb40a7f47cffc19c38ee51c756bd96cc131ec2cabf95f26cf441d3875c6b862d685e4733197b81460506e54a7a177c1775f

    • SSDEEP

      12288:YL7CSb2gLre1WYMEUSILvWdbGSexg+rrMgpAz47kDLj/BRsDklNsS6:27rPfeECUbLAneq06uk/j5Rs4lWS6

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks