General

  • Target

    49b8fcaed3a4b09565a922ae280266dd8565425bebec5540ad5972d031a8214a.exe

  • Size

    420KB

  • Sample

    241113-14e1qstnal

  • MD5

    4702305a023766ea84fbdc36e32dbbc3

  • SHA1

    796643a22b7c19b6296993d36a45ebbdb5b7c8d4

  • SHA256

    49b8fcaed3a4b09565a922ae280266dd8565425bebec5540ad5972d031a8214a

  • SHA512

    29ca0e8b9ffe133e6e1d8cda4ffe38df0eae82114719afe09e4cd1be2232d1e24251dadba41e064abdc45b30f10191f585e49b166ebe4f390ec0c798b9d806d6

  • SSDEEP

    6144:2x+LsYnmEe98RKePE0MefNUBDxQykyZJzOKuSU+rS4gWE9:2x+oSdHRKUMeNkfZ4EUpWE

Malware Config

Extracted

Family

redline

Botnet

gena

C2

193.233.20.30:4125

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      49b8fcaed3a4b09565a922ae280266dd8565425bebec5540ad5972d031a8214a.exe

    • Size

      420KB

    • MD5

      4702305a023766ea84fbdc36e32dbbc3

    • SHA1

      796643a22b7c19b6296993d36a45ebbdb5b7c8d4

    • SHA256

      49b8fcaed3a4b09565a922ae280266dd8565425bebec5540ad5972d031a8214a

    • SHA512

      29ca0e8b9ffe133e6e1d8cda4ffe38df0eae82114719afe09e4cd1be2232d1e24251dadba41e064abdc45b30f10191f585e49b166ebe4f390ec0c798b9d806d6

    • SSDEEP

      6144:2x+LsYnmEe98RKePE0MefNUBDxQykyZJzOKuSU+rS4gWE9:2x+oSdHRKUMeNkfZ4EUpWE

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks