General

  • Target

    0431434f126d269a570faaa1c.exe

  • Size

    262KB

  • Sample

    230703-vrnt8ahc32

  • MD5

    0431434f126d269a570faaa1c3f60aa2

  • SHA1

    9d89a2c5b53b54efa440c2bb3ab0ee8528c4d08d

  • SHA256

    5935fec9ff8a98300b168b0bfe4ede9c9e13a761cf46acec4731ab57694e3cf7

  • SHA512

    48adce6dd3c6214ce458037fecbc6473c7bc6efbc5031dbe3bb8cd45a3e79a52ebf928376327502701b1c61a25d28d3b432f0c72922880dd1922113fd7404f79

  • SSDEEP

    3072:rNw77ZNRlvyegV4Z+u8yJhVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWW3xapeW:RqTyelZ+cIpLdC4t8yXzU7mQ0l5A

Malware Config

Extracted

Family

redline

Botnet

andre

C2

77.91.124.49:19073

Attributes
  • auth_value

    8e5522dc6bdb7e288797bc46c2687b12

Targets

    • Target

      0431434f126d269a570faaa1c.exe

    • Size

      262KB

    • MD5

      0431434f126d269a570faaa1c3f60aa2

    • SHA1

      9d89a2c5b53b54efa440c2bb3ab0ee8528c4d08d

    • SHA256

      5935fec9ff8a98300b168b0bfe4ede9c9e13a761cf46acec4731ab57694e3cf7

    • SHA512

      48adce6dd3c6214ce458037fecbc6473c7bc6efbc5031dbe3bb8cd45a3e79a52ebf928376327502701b1c61a25d28d3b432f0c72922880dd1922113fd7404f79

    • SSDEEP

      3072:rNw77ZNRlvyegV4Z+u8yJhVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWW3xapeW:RqTyelZ+cIpLdC4t8yXzU7mQ0l5A

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks