General

  • Target

    916fd267917a216fde3652623c749ea890f3530195ef8bbfad9139a37cb4a813.exe

  • Size

    300KB

  • Sample

    250103-ea7b8syje1

  • MD5

    aa7e5ae710a742491d6d185ae235ada8

  • SHA1

    b35290cc2ad30580180c4520a7ba3fd88d9e913b

  • SHA256

    916fd267917a216fde3652623c749ea890f3530195ef8bbfad9139a37cb4a813

  • SHA512

    dd72ab2ea617a04482bdf57623fc044bb2ba73f0f6632af0c3a92b1e6e84d0d5b127982586fd5719c7dbe252f4d783bb08823b268eb77c1dd2dad9f277ecc6ed

  • SSDEEP

    3072:+cZqf7D341p/0+mAqky4GUQIgteeB1fA0PuTVAtkxzD3RQeqiOL2bBOA:+cZqf7DIvnWPLB1fA0GTV8kNwL

Malware Config

Extracted

Family

redline

Botnet

jhhg

C2

185.81.68.147:1912

Targets

    • Target

      916fd267917a216fde3652623c749ea890f3530195ef8bbfad9139a37cb4a813.exe

    • Size

      300KB

    • MD5

      aa7e5ae710a742491d6d185ae235ada8

    • SHA1

      b35290cc2ad30580180c4520a7ba3fd88d9e913b

    • SHA256

      916fd267917a216fde3652623c749ea890f3530195ef8bbfad9139a37cb4a813

    • SHA512

      dd72ab2ea617a04482bdf57623fc044bb2ba73f0f6632af0c3a92b1e6e84d0d5b127982586fd5719c7dbe252f4d783bb08823b268eb77c1dd2dad9f277ecc6ed

    • SSDEEP

      3072:+cZqf7D341p/0+mAqky4GUQIgteeB1fA0PuTVAtkxzD3RQeqiOL2bBOA:+cZqf7DIvnWPLB1fA0GTV8kNwL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks