General

  • Target

    9df6e3cc29fc824ea12120df0542b896b6c9ec0ba6633e74168474e2704b9e8c

  • Size

    176KB

  • Sample

    241111-b3bt9asqek

  • MD5

    269802d4817434b8c43783d5856d1295

  • SHA1

    4637c8a2e96e39a1444a460339f2493227d84f0b

  • SHA256

    9df6e3cc29fc824ea12120df0542b896b6c9ec0ba6633e74168474e2704b9e8c

  • SHA512

    0692b45775b7780a745e7a3de86ad1eb40edc2144b0e456e9c6d46091e642dac9b7f50a48ab24c8e38a8688a08ec357373d9983b9cc1d43e732dfdd476f7f6bb

  • SSDEEP

    3072:BxqZW11a2kX8fkRyeiBWep3FhhFvxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOf:zqZkkgN1hh

Malware Config

Extracted

Family

redline

Botnet

fabio

C2

193.233.20.27:4123

Attributes
  • auth_value

    56b82736c3f56b13be8e64c87d2cf9e5

Targets

    • Target

      9df6e3cc29fc824ea12120df0542b896b6c9ec0ba6633e74168474e2704b9e8c

    • Size

      176KB

    • MD5

      269802d4817434b8c43783d5856d1295

    • SHA1

      4637c8a2e96e39a1444a460339f2493227d84f0b

    • SHA256

      9df6e3cc29fc824ea12120df0542b896b6c9ec0ba6633e74168474e2704b9e8c

    • SHA512

      0692b45775b7780a745e7a3de86ad1eb40edc2144b0e456e9c6d46091e642dac9b7f50a48ab24c8e38a8688a08ec357373d9983b9cc1d43e732dfdd476f7f6bb

    • SSDEEP

      3072:BxqZW11a2kX8fkRyeiBWep3FhhFvxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOf:zqZkkgN1hh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks