General

  • Target

    48afab9596bb1861d6475e8843ce15c9d9869310b7a0f44404a8cf15b1718166N.exe

  • Size

    332KB

  • Sample

    241111-ch3mxazjaw

  • MD5

    aaa30c1c620a685d6bf7ed92e3b1ace5

  • SHA1

    2a9f6c679f696d17fb8cd2110f572f590ee462aa

  • SHA256

    e84cb82bc8a471ba146c654ff5faedb534741f8054a5edb37a14c28061a37dbd

  • SHA512

    0f41312644a2797dedf525981d98037da4a8d0a7a3661d8dcc92fc9eedefeef2568f925fb08c849689e7bb9b39c0a94fab122b87002e0a08447709196d0a3f4d

  • SSDEEP

    6144:yxALQ4TFz8edY8sTWv1IMd/5D7Xpgrd/Q1Iu/Lm:yxAMaJZdYChnferd/bu/C

Malware Config

Extracted

Family

redline

Botnet

gena

C2

193.233.20.30:4125

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      48afab9596bb1861d6475e8843ce15c9d9869310b7a0f44404a8cf15b1718166N.exe

    • Size

      332KB

    • MD5

      aaa30c1c620a685d6bf7ed92e3b1ace5

    • SHA1

      2a9f6c679f696d17fb8cd2110f572f590ee462aa

    • SHA256

      e84cb82bc8a471ba146c654ff5faedb534741f8054a5edb37a14c28061a37dbd

    • SHA512

      0f41312644a2797dedf525981d98037da4a8d0a7a3661d8dcc92fc9eedefeef2568f925fb08c849689e7bb9b39c0a94fab122b87002e0a08447709196d0a3f4d

    • SSDEEP

      6144:yxALQ4TFz8edY8sTWv1IMd/5D7Xpgrd/Q1Iu/Lm:yxAMaJZdYChnferd/bu/C

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks