General

  • Target

    731b319c64a0333df3e0046fdfe32a988f1e1ca0cba35bbb829f9953fb205e2aN

  • Size

    384KB

  • Sample

    241109-285mmaxkdr

  • MD5

    af3a7a9d1f95fd7a2f0125c3d7150060

  • SHA1

    124403875649d9747a93c80975a432b212177bc7

  • SHA256

    731b319c64a0333df3e0046fdfe32a988f1e1ca0cba35bbb829f9953fb205e2a

  • SHA512

    29118bdfa8e016ad1a74ff8e5ab4aa1afa6ff569e66d58a4c908ccf9d8a6a654ffb6144d016fd022c1ab3e88038c33048434955d6d54bcb6d964bfb66c80009e

  • SSDEEP

    6144:bCPl57cox89hfbjpIqCvPrtZAj4xQ2xh:bCPlFcoihzj6Be4O2xh

Malware Config

Extracted

Family

redline

Botnet

boris

C2

193.233.20.32:4125

Attributes
  • auth_value

    766b5bdf6dbefcf7ca223351952fc38f

Targets

    • Target

      731b319c64a0333df3e0046fdfe32a988f1e1ca0cba35bbb829f9953fb205e2aN

    • Size

      384KB

    • MD5

      af3a7a9d1f95fd7a2f0125c3d7150060

    • SHA1

      124403875649d9747a93c80975a432b212177bc7

    • SHA256

      731b319c64a0333df3e0046fdfe32a988f1e1ca0cba35bbb829f9953fb205e2a

    • SHA512

      29118bdfa8e016ad1a74ff8e5ab4aa1afa6ff569e66d58a4c908ccf9d8a6a654ffb6144d016fd022c1ab3e88038c33048434955d6d54bcb6d964bfb66c80009e

    • SSDEEP

      6144:bCPl57cox89hfbjpIqCvPrtZAj4xQ2xh:bCPlFcoihzj6Be4O2xh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks