General

  • Target

    5f1b8ac2a191feebc53d932c90cac62d939ee63768ec6e44abff53a313db84e9N.exe

  • Size

    168KB

  • Sample

    241206-bxj9faypbk

  • MD5

    0d735e67ae6c9ec089bb6ea71e8f8480

  • SHA1

    798e74b1629946828c8fef847539bf7a5d0a84b1

  • SHA256

    5f1b8ac2a191feebc53d932c90cac62d939ee63768ec6e44abff53a313db84e9

  • SHA512

    50942aeee7e54be2392cbe8692d8f5402d5e23a5400fc7827ed7deca77a26ce5b7041231ccf0ba4acaf1f02c5c3b206270086f422e0a1c991100edcd9e5b8f9f

  • SSDEEP

    1536:SeiEBOqhVZCGWEWmPcn8WTVReVig+QrHGTGqVYJWbu0b3/DnRYKl84wYkp8e8hR:DiqFk8WTVpdQPqVYI5vDnRYKl88e8hR

Malware Config

Extracted

Family

redline

Botnet

dippo

C2

217.196.96.102:4132

Attributes
  • auth_value

    79490ff628fd6af3b29170c3c163874b

Targets

    • Target

      5f1b8ac2a191feebc53d932c90cac62d939ee63768ec6e44abff53a313db84e9N.exe

    • Size

      168KB

    • MD5

      0d735e67ae6c9ec089bb6ea71e8f8480

    • SHA1

      798e74b1629946828c8fef847539bf7a5d0a84b1

    • SHA256

      5f1b8ac2a191feebc53d932c90cac62d939ee63768ec6e44abff53a313db84e9

    • SHA512

      50942aeee7e54be2392cbe8692d8f5402d5e23a5400fc7827ed7deca77a26ce5b7041231ccf0ba4acaf1f02c5c3b206270086f422e0a1c991100edcd9e5b8f9f

    • SSDEEP

      1536:SeiEBOqhVZCGWEWmPcn8WTVReVig+QrHGTGqVYJWbu0b3/DnRYKl84wYkp8e8hR:DiqFk8WTVpdQPqVYI5vDnRYKl88e8hR

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks