General

  • Target

    i1117692_JC.exe

  • Size

    175KB

  • Sample

    230906-xxejvabb5z

  • MD5

    2b8199ad844ff3a01c9912c98b96a7ea

  • SHA1

    d3e3e567dc324908102353945d81b758f071b52f

  • SHA256

    a1b6c6e2fb697341192b47aa18d536b45ab61d01d53191d6aa48610941386fda

  • SHA512

    9706d15fc24d81ff5e6a7d900b61e231ffb45df577fd4beb08ae1781cde0db64c746007a323c91b2bb8ad8a2846ec3f7263e4fa9ae7f92c07fb523a6e040be42

  • SSDEEP

    3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e

Malware Config

Extracted

Family

redline

Botnet

gena

C2

77.91.124.82:19071

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      i1117692_JC.exe

    • Size

      175KB

    • MD5

      2b8199ad844ff3a01c9912c98b96a7ea

    • SHA1

      d3e3e567dc324908102353945d81b758f071b52f

    • SHA256

      a1b6c6e2fb697341192b47aa18d536b45ab61d01d53191d6aa48610941386fda

    • SHA512

      9706d15fc24d81ff5e6a7d900b61e231ffb45df577fd4beb08ae1781cde0db64c746007a323c91b2bb8ad8a2846ec3f7263e4fa9ae7f92c07fb523a6e040be42

    • SSDEEP

      3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks