General

  • Target

    cf38150575a2dd3b2d5e4a45b2c66a570ff730d837bbb5cefa264389e7698a52N

  • Size

    386KB

  • Sample

    241111-aecafa1mfp

  • MD5

    00f266f757dc3ea38bfa2fdd763933c0

  • SHA1

    99a75e451673f6805be9fd185768b4b5d100c82c

  • SHA256

    cf38150575a2dd3b2d5e4a45b2c66a570ff730d837bbb5cefa264389e7698a52

  • SHA512

    61311ac2e9d109731190a151ba70f8a960dfc1c8ff9fd5563d830e13282dafb04d7666e3032f037be46f4959790337c06b217a92c558966bacebc28e2a565208

  • SSDEEP

    6144:TH5+rzP8LX/EXQPLJ32eGN4fKP6tDuVpJs8nVXvj+XWmva:T5+rzP8XsXM4N+KypiJsoFaGd

Malware Config

Extracted

Family

redline

Botnet

boris

C2

193.233.20.32:4125

Attributes
  • auth_value

    766b5bdf6dbefcf7ca223351952fc38f

Targets

    • Target

      cf38150575a2dd3b2d5e4a45b2c66a570ff730d837bbb5cefa264389e7698a52N

    • Size

      386KB

    • MD5

      00f266f757dc3ea38bfa2fdd763933c0

    • SHA1

      99a75e451673f6805be9fd185768b4b5d100c82c

    • SHA256

      cf38150575a2dd3b2d5e4a45b2c66a570ff730d837bbb5cefa264389e7698a52

    • SHA512

      61311ac2e9d109731190a151ba70f8a960dfc1c8ff9fd5563d830e13282dafb04d7666e3032f037be46f4959790337c06b217a92c558966bacebc28e2a565208

    • SSDEEP

      6144:TH5+rzP8LX/EXQPLJ32eGN4fKP6tDuVpJs8nVXvj+XWmva:T5+rzP8XsXM4N+KypiJsoFaGd

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks