General

  • Target

    t2978361_JC.exe

  • Size

    175KB

  • Sample

    230906-x3bp5sbc3v

  • MD5

    7b7c5af0b8abd9d86992e0eb52fc0422

  • SHA1

    366fd11059b4b56ccd40574690990005aeaec4fa

  • SHA256

    f79ae4bad0585178911ff9b281b1908a201d05f90ee3ed4771a1af33230d02c2

  • SHA512

    843edca7bf1d313f734e5e29e22b5f24d3ea18d99c4758f8333e1ddbce280367f8159ff71573f2bc102566544f3315d4a61f94e728104e796074183ff0464b96

  • SSDEEP

    3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e

Malware Config

Extracted

Family

redline

Botnet

gena

C2

77.91.124.82:19071

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      t2978361_JC.exe

    • Size

      175KB

    • MD5

      7b7c5af0b8abd9d86992e0eb52fc0422

    • SHA1

      366fd11059b4b56ccd40574690990005aeaec4fa

    • SHA256

      f79ae4bad0585178911ff9b281b1908a201d05f90ee3ed4771a1af33230d02c2

    • SHA512

      843edca7bf1d313f734e5e29e22b5f24d3ea18d99c4758f8333e1ddbce280367f8159ff71573f2bc102566544f3315d4a61f94e728104e796074183ff0464b96

    • SSDEEP

      3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks