General

  • Target

    e6c3715445006dc4ae8e7d1e2be8b41a48b4bfed674e0d91c0823a0472dc39d8.exe

  • Size

    168KB

  • Sample

    241204-ch4vza1pej

  • MD5

    c273d7903331601174740dc473bbce14

  • SHA1

    24828d4170a141ebd61b0740dc365f613b0826be

  • SHA256

    e6c3715445006dc4ae8e7d1e2be8b41a48b4bfed674e0d91c0823a0472dc39d8

  • SHA512

    ff7ddf43e00b851187531db37d8606949b465fab953b5ce354094a258b487e3cf1a9061aee5282a52f0186f764076733b1865882839eb36e21ad752d3f40f2d7

  • SSDEEP

    1536:VyWq6qlVZRGW9eh5raYkjFbq7VrM8KOYjYTGqVibuF1JR5pYcceq83wYkv8e8h7q:QftEmXFqV28npYcceqh8e8h7q

Malware Config

Extracted

Family

redline

Botnet

dion

C2

217.196.96.101:4132

Attributes
  • auth_value

    6e0b6a3255923968b15f61a2c040c5c9

Targets

    • Target

      e6c3715445006dc4ae8e7d1e2be8b41a48b4bfed674e0d91c0823a0472dc39d8.exe

    • Size

      168KB

    • MD5

      c273d7903331601174740dc473bbce14

    • SHA1

      24828d4170a141ebd61b0740dc365f613b0826be

    • SHA256

      e6c3715445006dc4ae8e7d1e2be8b41a48b4bfed674e0d91c0823a0472dc39d8

    • SHA512

      ff7ddf43e00b851187531db37d8606949b465fab953b5ce354094a258b487e3cf1a9061aee5282a52f0186f764076733b1865882839eb36e21ad752d3f40f2d7

    • SSDEEP

      1536:VyWq6qlVZRGW9eh5raYkjFbq7VrM8KOYjYTGqVibuF1JR5pYcceq83wYkv8e8h7q:QftEmXFqV28npYcceqh8e8h7q

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks