General

  • Target

    n4109700.exe

  • Size

    174KB

  • Sample

    230904-bt9d6ada4t

  • MD5

    6d17b9e234193cf1d3adbc03fc5d08c2

  • SHA1

    56c4bbbc4d25fd46029ac2d6cf9fa8da7aeabc8f

  • SHA256

    e23dcd9fb56c0f9c5b2a7de72b7f37a1da185d543041df69778552fca1476488

  • SHA512

    3c20e1c87d92812c11d46e993690fac6afad0a2b36632072ff38525e9744c620efad65391a92473d2b0e7e2b7f26fe6508cbe3189e5174938c3f63f77e8187b7

  • SSDEEP

    3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e

Malware Config

Extracted

Family

redline

Botnet

gena

C2

77.91.124.82:19071

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      n4109700.exe

    • Size

      174KB

    • MD5

      6d17b9e234193cf1d3adbc03fc5d08c2

    • SHA1

      56c4bbbc4d25fd46029ac2d6cf9fa8da7aeabc8f

    • SHA256

      e23dcd9fb56c0f9c5b2a7de72b7f37a1da185d543041df69778552fca1476488

    • SHA512

      3c20e1c87d92812c11d46e993690fac6afad0a2b36632072ff38525e9744c620efad65391a92473d2b0e7e2b7f26fe6508cbe3189e5174938c3f63f77e8187b7

    • SSDEEP

      3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks