General

  • Target

    i1009537.exe

  • Size

    174KB

  • Sample

    230904-bypwbadf43

  • MD5

    ebc94da1f9aa5951a1772e27710c4147

  • SHA1

    8e4f4af1dd2e5c919580859571c199ae16cf0ffa

  • SHA256

    6abc00482649fcd2b81a295536adb68e22d42e5e1bf88eda9b05be6144faae77

  • SHA512

    8c174a44eeb517af98589786473c57be757911faf940aecfd1bb92bf1c7e2d2d0ce7b453df36ea1dc8ad98281f56b059d57f61b5b7be8adc863022b09febdfbf

  • SSDEEP

    3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e

Malware Config

Extracted

Family

redline

Botnet

gena

C2

77.91.124.82:19071

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      i1009537.exe

    • Size

      174KB

    • MD5

      ebc94da1f9aa5951a1772e27710c4147

    • SHA1

      8e4f4af1dd2e5c919580859571c199ae16cf0ffa

    • SHA256

      6abc00482649fcd2b81a295536adb68e22d42e5e1bf88eda9b05be6144faae77

    • SHA512

      8c174a44eeb517af98589786473c57be757911faf940aecfd1bb92bf1c7e2d2d0ce7b453df36ea1dc8ad98281f56b059d57f61b5b7be8adc863022b09febdfbf

    • SSDEEP

      3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks