General

  • Target

    ac74aeee1fbf323ad871323e5f48e2cd71a1c66ff2b190f6aebb12ec1ad9e600N.exe

  • Size

    428KB

  • Sample

    241205-kdmd5asmbr

  • MD5

    2756a8572321ca2f8c1828652e5ce390

  • SHA1

    b7a5b8137575f57b102a4d6e111ee8838382b5df

  • SHA256

    ac74aeee1fbf323ad871323e5f48e2cd71a1c66ff2b190f6aebb12ec1ad9e600

  • SHA512

    5e9f700be595a8d615e40335d03e23ea618a9941c1881963e79e22fe9962f5bce1c8207fff81733c52a07597c6367b2ef028068047eeee7e31c71db2c281a7ac

  • SSDEEP

    6144:XaTvM7ShqOEgFmXn594tHllr4vpZPHouzbgwuO0RFZKnlVMwVfG:XaTE7fKFE5WtH/4vPIunnwRFZ4l

Malware Config

Extracted

Family

redline

C2

185.215.113.28:4819

Attributes
  • auth_value

    e99caef0569c1428b87dce9189c994a4

Targets

    • Target

      ac74aeee1fbf323ad871323e5f48e2cd71a1c66ff2b190f6aebb12ec1ad9e600N.exe

    • Size

      428KB

    • MD5

      2756a8572321ca2f8c1828652e5ce390

    • SHA1

      b7a5b8137575f57b102a4d6e111ee8838382b5df

    • SHA256

      ac74aeee1fbf323ad871323e5f48e2cd71a1c66ff2b190f6aebb12ec1ad9e600

    • SHA512

      5e9f700be595a8d615e40335d03e23ea618a9941c1881963e79e22fe9962f5bce1c8207fff81733c52a07597c6367b2ef028068047eeee7e31c71db2c281a7ac

    • SSDEEP

      6144:XaTvM7ShqOEgFmXn594tHllr4vpZPHouzbgwuO0RFZKnlVMwVfG:XaTE7fKFE5WtH/4vPIunnwRFZ4l

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks