General

  • Target

    65d18df23c60d9f0d917880da59d3ddb81483462d1253283c8c526874c8839d9.exe

  • Size

    582KB

  • Sample

    230808-qf3f1sec6z

  • MD5

    2b77bacb2ac69963039eb41199eee479

  • SHA1

    5af531f1fd5f1da98d881a63b478bb274287f381

  • SHA256

    65d18df23c60d9f0d917880da59d3ddb81483462d1253283c8c526874c8839d9

  • SHA512

    26d4146ca3355b18448493df40528ca83c8f26cf96d4801629c451635771a1113612e60edb3cac4c290173dd20705a01156dc0d969a76a17fdb50764e891cc39

  • SSDEEP

    12288:tLDfczWW/AgKv/wrpnGk6lfSPMn2nOwZDfPFb/Xj:tffiKSMXlq0wtBDXj

Malware Config

Extracted

Family

redline

Botnet

gena

C2

185.161.248.73:4164

Attributes
  • auth_value

    d05bf43eef533e262271449829751d07

Targets

    • Target

      65d18df23c60d9f0d917880da59d3ddb81483462d1253283c8c526874c8839d9.exe

    • Size

      582KB

    • MD5

      2b77bacb2ac69963039eb41199eee479

    • SHA1

      5af531f1fd5f1da98d881a63b478bb274287f381

    • SHA256

      65d18df23c60d9f0d917880da59d3ddb81483462d1253283c8c526874c8839d9

    • SHA512

      26d4146ca3355b18448493df40528ca83c8f26cf96d4801629c451635771a1113612e60edb3cac4c290173dd20705a01156dc0d969a76a17fdb50764e891cc39

    • SSDEEP

      12288:tLDfczWW/AgKv/wrpnGk6lfSPMn2nOwZDfPFb/Xj:tffiKSMXlq0wtBDXj

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks