General

  • Target

    23e7f8bb6f0be1afc1604f6c986df1d1b50b31b64fa08b404028f5ce6b20edacN.exe

  • Size

    490KB

  • Sample

    250123-my61daxlbs

  • MD5

    21f3700b1c368fdf362e069d4169f4b0

  • SHA1

    411e69efd7e55ed08c2cc33c1df81f4f1cee6bdc

  • SHA256

    23e7f8bb6f0be1afc1604f6c986df1d1b50b31b64fa08b404028f5ce6b20edac

  • SHA512

    836a6d80d5dc9527ca868ff4c982f5ad596863cf711e78ff82c554d4e6b5c0e30927918ff577a73e1aa5d9ad0d8b153820ad0533896b845c8cc9ae55381cc3e4

  • SSDEEP

    12288:t6Vqsr6Rf31glpgMc60LVfUJwMxNR2i5wd:cIsG5lgnZ90hfawMciid

Malware Config

Extracted

Family

redline

C2

193.124.22.10:5241

Attributes
  • auth_value

    9d006a439ab657f87bacd7a8c5f366b6

Targets

    • Target

      23e7f8bb6f0be1afc1604f6c986df1d1b50b31b64fa08b404028f5ce6b20edacN.exe

    • Size

      490KB

    • MD5

      21f3700b1c368fdf362e069d4169f4b0

    • SHA1

      411e69efd7e55ed08c2cc33c1df81f4f1cee6bdc

    • SHA256

      23e7f8bb6f0be1afc1604f6c986df1d1b50b31b64fa08b404028f5ce6b20edac

    • SHA512

      836a6d80d5dc9527ca868ff4c982f5ad596863cf711e78ff82c554d4e6b5c0e30927918ff577a73e1aa5d9ad0d8b153820ad0533896b845c8cc9ae55381cc3e4

    • SSDEEP

      12288:t6Vqsr6Rf31glpgMc60LVfUJwMxNR2i5wd:cIsG5lgnZ90hfawMciid

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks