General

  • Target

    48604169a3c1cd21b0c98d67b2135a284a61c7818de2e65bd1119554bbdf07ffN.exe

  • Size

    175KB

  • Sample

    241204-zb71dawjdm

  • MD5

    0aacbc799a195afa45fc0318fb777d80

  • SHA1

    91f72cd09a89a7f2e792b7b6956576fe6ef3b919

  • SHA256

    48604169a3c1cd21b0c98d67b2135a284a61c7818de2e65bd1119554bbdf07ff

  • SHA512

    d95db9f3c6324b0ab9e21d46e4ccb71752676871882dbd5d976e36bbefe850e0d6dfba770b6419d345f73c58246aa5d8b09131f2532f329d0aa4c12c81cb7398

  • SSDEEP

    3072:KxqZWJBaKULo3pfEWGljeerDF/hevTxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw09:4qZIpfEWYL/hk

Malware Config

Extracted

Family

redline

Botnet

fuba

C2

193.56.146.11:4162

Attributes
  • auth_value

    43015841fc23c63b15ca6ffe1d278d5e

Targets

    • Target

      48604169a3c1cd21b0c98d67b2135a284a61c7818de2e65bd1119554bbdf07ffN.exe

    • Size

      175KB

    • MD5

      0aacbc799a195afa45fc0318fb777d80

    • SHA1

      91f72cd09a89a7f2e792b7b6956576fe6ef3b919

    • SHA256

      48604169a3c1cd21b0c98d67b2135a284a61c7818de2e65bd1119554bbdf07ff

    • SHA512

      d95db9f3c6324b0ab9e21d46e4ccb71752676871882dbd5d976e36bbefe850e0d6dfba770b6419d345f73c58246aa5d8b09131f2532f329d0aa4c12c81cb7398

    • SSDEEP

      3072:KxqZWJBaKULo3pfEWGljeerDF/hevTxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw09:4qZIpfEWYL/hk

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks