General

  • Target

    578e5cc51a25164dc2d0f418d315f01fce50d7bf87f4fb29f4fc6807d44a5cb2.exe

  • Size

    391KB

  • Sample

    241111-b31hlszepf

  • MD5

    1b5973fb530d45b6b042712c11c4c43b

  • SHA1

    61bc87c01a0454c46610493efebdc9edf154f417

  • SHA256

    578e5cc51a25164dc2d0f418d315f01fce50d7bf87f4fb29f4fc6807d44a5cb2

  • SHA512

    0bc90c33d719e07859418e0778f96909c1b51a16304321008302f094a98f97cc306ff9206d4737d588e5e6b2a629b62e6d6ac6805946ea132266e2508ab7baa1

  • SSDEEP

    6144:hOrLL37QiTo9FsYgaZXIrMv/gCe8piXGjQ0yhJ:hOrnZuFs5aZ4Av48pVfyhJ

Malware Config

Extracted

Family

redline

Botnet

gena

C2

193.233.20.30:4125

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      578e5cc51a25164dc2d0f418d315f01fce50d7bf87f4fb29f4fc6807d44a5cb2.exe

    • Size

      391KB

    • MD5

      1b5973fb530d45b6b042712c11c4c43b

    • SHA1

      61bc87c01a0454c46610493efebdc9edf154f417

    • SHA256

      578e5cc51a25164dc2d0f418d315f01fce50d7bf87f4fb29f4fc6807d44a5cb2

    • SHA512

      0bc90c33d719e07859418e0778f96909c1b51a16304321008302f094a98f97cc306ff9206d4737d588e5e6b2a629b62e6d6ac6805946ea132266e2508ab7baa1

    • SSDEEP

      6144:hOrLL37QiTo9FsYgaZXIrMv/gCe8piXGjQ0yhJ:hOrnZuFs5aZ4Av48pVfyhJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks