General

  • Target

    d3cffa3132788373e9bda677cf1e71789dd594fe245e81f0e063a0dbd70cce93.exe

  • Size

    175KB

  • Sample

    241206-f98j1ssnbz

  • MD5

    fd04644a9a5b296a4961bb083354bbe4

  • SHA1

    fd3331d254c03a4ba060a0f15acb6dac56610b36

  • SHA256

    d3cffa3132788373e9bda677cf1e71789dd594fe245e81f0e063a0dbd70cce93

  • SHA512

    b120d261921106db0846e510e84f5c95d6a816acdd1fa5f5e7ce1fed87c4a45ffbff3330376d8a9b1f25a854c82234e6062acf3c5d1059274615eb924bc7d417

  • SSDEEP

    3072:KxqZWJBaKULo3pfEWGljeerDF/hevTxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0Z:4qZIpfEWYL/hk8

Malware Config

Extracted

Family

redline

Botnet

fuba

C2

193.56.146.11:4162

Attributes
  • auth_value

    43015841fc23c63b15ca6ffe1d278d5e

Targets

    • Target

      d3cffa3132788373e9bda677cf1e71789dd594fe245e81f0e063a0dbd70cce93.exe

    • Size

      175KB

    • MD5

      fd04644a9a5b296a4961bb083354bbe4

    • SHA1

      fd3331d254c03a4ba060a0f15acb6dac56610b36

    • SHA256

      d3cffa3132788373e9bda677cf1e71789dd594fe245e81f0e063a0dbd70cce93

    • SHA512

      b120d261921106db0846e510e84f5c95d6a816acdd1fa5f5e7ce1fed87c4a45ffbff3330376d8a9b1f25a854c82234e6062acf3c5d1059274615eb924bc7d417

    • SSDEEP

      3072:KxqZWJBaKULo3pfEWGljeerDF/hevTxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0Z:4qZIpfEWYL/hk8

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks