General

  • Target

    4c44e92e562f8899ba62eadea80a5772db85bd2c8c945cea70860e2027fb86ac.exe

  • Size

    285KB

  • Sample

    241205-ecb9watjgp

  • MD5

    78192b7acbc195263a20ed35ba1cbeec

  • SHA1

    1d0b4b57502303ea1fef9af4a2bb9a6ef7e72315

  • SHA256

    4c44e92e562f8899ba62eadea80a5772db85bd2c8c945cea70860e2027fb86ac

  • SHA512

    1bda81ff4e9f0ea030c018e6cea5da2d50f553e0cd211b90c9f7133bec4558c7c816b4379af6e056e725a01e89335d4e3af991ec725c2b4440d3ebedc91383b4

  • SSDEEP

    6144:G5O6oBTgUlJ8SDTtlB3X1x/je5IoWUKzweFO1+7C0KW:4TATgwJjDDBHPe5IolaweFO8enW

Malware Config

Extracted

Family

redline

Botnet

fronx

C2

fronxtracking.com:80

Attributes
  • auth_value

    6e7038b202e5ac311b24bb13cac75d68

Targets

    • Target

      4c44e92e562f8899ba62eadea80a5772db85bd2c8c945cea70860e2027fb86ac.exe

    • Size

      285KB

    • MD5

      78192b7acbc195263a20ed35ba1cbeec

    • SHA1

      1d0b4b57502303ea1fef9af4a2bb9a6ef7e72315

    • SHA256

      4c44e92e562f8899ba62eadea80a5772db85bd2c8c945cea70860e2027fb86ac

    • SHA512

      1bda81ff4e9f0ea030c018e6cea5da2d50f553e0cd211b90c9f7133bec4558c7c816b4379af6e056e725a01e89335d4e3af991ec725c2b4440d3ebedc91383b4

    • SSDEEP

      6144:G5O6oBTgUlJ8SDTtlB3X1x/je5IoWUKzweFO1+7C0KW:4TATgwJjDDBHPe5IolaweFO8enW

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks