General

  • Target

    0c6e46254a2970331a9e4e06f799934368a76af445f24b8f734aee2dbbad6e46N.exe

  • Size

    292KB

  • Sample

    250202-lc9zgaxmfm

  • MD5

    6bc8ed282353692ebc4f3117e4ecf850

  • SHA1

    6a13bad9455b1bbd5a996b4db226454de72b93e4

  • SHA256

    0c6e46254a2970331a9e4e06f799934368a76af445f24b8f734aee2dbbad6e46

  • SHA512

    c0bf8a2088679ebabf49a253e027c2651ee9a911e00ef2f43c7baf811830252b88817b335721fb00c1917190f93c776bf91357af76e3729d38b3e41a2c7a52ff

  • SSDEEP

    6144:cvd1MRI08ajawvs9TqeiQcw/FiXUXp/GFLsz7rFEvJiq:c1MRB8aNvsxq41XV8Lsz7rFEv

Malware Config

Extracted

Family

redline

Botnet

work100

C2

193.233.132.4:62111

Targets

    • Target

      0c6e46254a2970331a9e4e06f799934368a76af445f24b8f734aee2dbbad6e46N.exe

    • Size

      292KB

    • MD5

      6bc8ed282353692ebc4f3117e4ecf850

    • SHA1

      6a13bad9455b1bbd5a996b4db226454de72b93e4

    • SHA256

      0c6e46254a2970331a9e4e06f799934368a76af445f24b8f734aee2dbbad6e46

    • SHA512

      c0bf8a2088679ebabf49a253e027c2651ee9a911e00ef2f43c7baf811830252b88817b335721fb00c1917190f93c776bf91357af76e3729d38b3e41a2c7a52ff

    • SSDEEP

      6144:cvd1MRI08ajawvs9TqeiQcw/FiXUXp/GFLsz7rFEvJiq:c1MRB8aNvsxq41XV8Lsz7rFEv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks