General

  • Target

    0b4ddd70b474b1f317ab498592a61a01b6c5e25d301bea0e5e67c12424eb3511N.exe

  • Size

    482KB

  • Sample

    250104-k2w88svlgm

  • MD5

    010d03f3e41336bbd2c29a08f43592a0

  • SHA1

    068cbc987244b362465f70638381b2640188ca04

  • SHA256

    0b4ddd70b474b1f317ab498592a61a01b6c5e25d301bea0e5e67c12424eb3511

  • SHA512

    5467c67469d3b8a23452e3427ce43340f2ddf04fde065aa9ac36f49c0fd0293fcd0033bf493787034df36847c77872a0d5313c1d87861f1c3bdfac3dc159be43

  • SSDEEP

    6144:wD5nGxijz9VhVPjwxkI8ZQsRRRC6nQOzCa0K05JgPvtLkhSCmQLKeMk/0hk1S:A8ijRbVPExUQsX3noaSJgPFYcQKnKM

Malware Config

Extracted

Family

redline

Botnet

20201212

C2

80.87.192.249:16640

Attributes
  • auth_value

    00938fbc99410eb2e8dca000ec5f89db

Targets

    • Target

      0b4ddd70b474b1f317ab498592a61a01b6c5e25d301bea0e5e67c12424eb3511N.exe

    • Size

      482KB

    • MD5

      010d03f3e41336bbd2c29a08f43592a0

    • SHA1

      068cbc987244b362465f70638381b2640188ca04

    • SHA256

      0b4ddd70b474b1f317ab498592a61a01b6c5e25d301bea0e5e67c12424eb3511

    • SHA512

      5467c67469d3b8a23452e3427ce43340f2ddf04fde065aa9ac36f49c0fd0293fcd0033bf493787034df36847c77872a0d5313c1d87861f1c3bdfac3dc159be43

    • SSDEEP

      6144:wD5nGxijz9VhVPjwxkI8ZQsRRRC6nQOzCa0K05JgPvtLkhSCmQLKeMk/0hk1S:A8ijRbVPExUQsX3noaSJgPFYcQKnKM

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks