General

  • Target

    4c6fb742ec23aaddebd5b488de9400c58269392120d002bf2f9740adaca12cd1N.exe

  • Size

    457KB

  • Sample

    241111-cc71fazgpg

  • MD5

    f78ab82d417f1f85fd37151f5e4954e2

  • SHA1

    cbd63591c14c07be2126fed0ef46530950e7ba0e

  • SHA256

    0823fa53fdeec482fe9aa2fbfb18c657a8c1d842a520cf4beaa31eadb3f612a4

  • SHA512

    aa202c155f02d1d3646f352e2a93444d9cab5d0617715a2ca3c592be559755045afca1ca538081edfe5ca6a8a87eb5fc40c6f01c1174ab91a81b3598a02031f5

  • SSDEEP

    6144:lupun857mLsFXhSIvkUYmsAZv0CGtjKITv13iMj9bAHDDdog0fO7WnI0:V857mgFXKGoYMjRK/ECWnR

Malware Config

Extracted

Family

redline

Botnet

down

C2

193.233.20.31:4125

Attributes
  • auth_value

    12c31a90c72f5efae8c053a0bd339381

Targets

    • Target

      4c6fb742ec23aaddebd5b488de9400c58269392120d002bf2f9740adaca12cd1N.exe

    • Size

      457KB

    • MD5

      f78ab82d417f1f85fd37151f5e4954e2

    • SHA1

      cbd63591c14c07be2126fed0ef46530950e7ba0e

    • SHA256

      0823fa53fdeec482fe9aa2fbfb18c657a8c1d842a520cf4beaa31eadb3f612a4

    • SHA512

      aa202c155f02d1d3646f352e2a93444d9cab5d0617715a2ca3c592be559755045afca1ca538081edfe5ca6a8a87eb5fc40c6f01c1174ab91a81b3598a02031f5

    • SSDEEP

      6144:lupun857mLsFXhSIvkUYmsAZv0CGtjKITv13iMj9bAHDDdog0fO7WnI0:V857mgFXKGoYMjRK/ECWnR

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks