General

  • Target

    04e7643cf5cec66669031d27d283396c87a3fee7b0048702a0f383960ee43071

  • Size

    352KB

  • Sample

    250123-x7f6eszqez

  • MD5

    1f75c52f07fa155f3c907967fb764606

  • SHA1

    0bd8d87e1ba5626a2324e75e8445011d001cf01f

  • SHA256

    04e7643cf5cec66669031d27d283396c87a3fee7b0048702a0f383960ee43071

  • SHA512

    b34ee7b9fba5287f2dd53a72fb0cea31dc16b70258532dea9afe27c552bd059eca3492eb9ce2181bb1bfc724891e18b847437f9d545027831584613baada410d

  • SSDEEP

    6144:CP5Z+5JiCnbBumrU6DfKm///w0XaSh4E+Ztkjt:CBZoJ3rU6RH/wjjGt

Malware Config

Extracted

Family

redline

Botnet

rosn

C2

176.113.115.145:4125

Attributes
  • auth_value

    050a19e1db4d0024b0f23b37dcf961f4

Targets

    • Target

      04e7643cf5cec66669031d27d283396c87a3fee7b0048702a0f383960ee43071

    • Size

      352KB

    • MD5

      1f75c52f07fa155f3c907967fb764606

    • SHA1

      0bd8d87e1ba5626a2324e75e8445011d001cf01f

    • SHA256

      04e7643cf5cec66669031d27d283396c87a3fee7b0048702a0f383960ee43071

    • SHA512

      b34ee7b9fba5287f2dd53a72fb0cea31dc16b70258532dea9afe27c552bd059eca3492eb9ce2181bb1bfc724891e18b847437f9d545027831584613baada410d

    • SSDEEP

      6144:CP5Z+5JiCnbBumrU6DfKm///w0XaSh4E+Ztkjt:CBZoJ3rU6RH/wjjGt

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks