General

  • Target

    rBUo_Q51tM81Zz_hOeaiPK11.exe

  • Size

    356KB

  • Sample

    250123-v1zm3sxjgt

  • MD5

    81c9b42b9a46e50981d3f078688ade0c

  • SHA1

    fa0bb118655fa260855b18f73b49358b389b7bcd

  • SHA256

    01b9ae05c0c5d50490c05aa2e2873b77a71792adf7c9fb0a1205780a70547192

  • SHA512

    e26e3fab4bb855f0c4a838c32b49e4c1530e6bc3eddc9163c9f1f0c3e1c9ddacfadc40ae21108a3938b642d9c7c82905be83badee0c58eec5e1f2934587b950c

  • SSDEEP

    6144:3ShHvmmMtHKD/FyOPcg/F/5MlGzbgsfcMVu4nKGfmQbmxO:ihPJMtHK7Fh0Gbgxx4n9f

Malware Config

Extracted

Family

redline

Botnet

@Germany

C2

194.26.135.162:2920

Attributes
  • auth_value

    9d15d78194367a949e54a07d6ce02c62

Targets

    • Target

      rBUo_Q51tM81Zz_hOeaiPK11.exe

    • Size

      356KB

    • MD5

      81c9b42b9a46e50981d3f078688ade0c

    • SHA1

      fa0bb118655fa260855b18f73b49358b389b7bcd

    • SHA256

      01b9ae05c0c5d50490c05aa2e2873b77a71792adf7c9fb0a1205780a70547192

    • SHA512

      e26e3fab4bb855f0c4a838c32b49e4c1530e6bc3eddc9163c9f1f0c3e1c9ddacfadc40ae21108a3938b642d9c7c82905be83badee0c58eec5e1f2934587b950c

    • SSDEEP

      6144:3ShHvmmMtHKD/FyOPcg/F/5MlGzbgsfcMVu4nKGfmQbmxO:ihPJMtHK7Fh0Gbgxx4n9f

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks