General

  • Target

    447353e35f7ec81c3225efbab630aef3dcaaffd42d793973b7c74730626c368a.exe

  • Size

    383KB

  • Sample

    241111-bebvcaykc1

  • MD5

    60fefab632989a95cb0f6dad27ebb85a

  • SHA1

    464dbc8d4377ea2d036cdf34b162fed462e41d21

  • SHA256

    447353e35f7ec81c3225efbab630aef3dcaaffd42d793973b7c74730626c368a

  • SHA512

    df7291c9c32725e35fae443913191b3c61a8db1fa80bdd940de55acfe2a5ea431ddab5e4ace5e28fec55711efc972f59a0c07bce43eccf47ad512f2280e3da84

  • SSDEEP

    6144:RK0bNgJ2LWxhvH7zHBzqE6/15CJZkEypV3qa2DoQGtwYkTfzS:RK0bNgsLW3/PHIEulTnOVVYSzS

Malware Config

Extracted

Family

redline

Botnet

boris

C2

193.233.20.32:4125

Attributes
  • auth_value

    766b5bdf6dbefcf7ca223351952fc38f

Targets

    • Target

      447353e35f7ec81c3225efbab630aef3dcaaffd42d793973b7c74730626c368a.exe

    • Size

      383KB

    • MD5

      60fefab632989a95cb0f6dad27ebb85a

    • SHA1

      464dbc8d4377ea2d036cdf34b162fed462e41d21

    • SHA256

      447353e35f7ec81c3225efbab630aef3dcaaffd42d793973b7c74730626c368a

    • SHA512

      df7291c9c32725e35fae443913191b3c61a8db1fa80bdd940de55acfe2a5ea431ddab5e4ace5e28fec55711efc972f59a0c07bce43eccf47ad512f2280e3da84

    • SSDEEP

      6144:RK0bNgJ2LWxhvH7zHBzqE6/15CJZkEypV3qa2DoQGtwYkTfzS:RK0bNgsLW3/PHIEulTnOVVYSzS

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks