General

  • Target

    886b8bec0373f2cddb3c7208965b45afa249834e2dd42a2284122adf296d1a80.exe

  • Size

    362KB

  • Sample

    241113-1wlhjszgrj

  • MD5

    04fe5f894ef3fe8bf26f8247242826b3

  • SHA1

    3711e871d08e86ec22715cd6c8763a513b46cc4e

  • SHA256

    886b8bec0373f2cddb3c7208965b45afa249834e2dd42a2284122adf296d1a80

  • SHA512

    470cba791b51ef3c730e2abb51d6a2c4cfa80e7536adf2959399e5d6442b9275bff52094cd59feb5a872ae9de6e1e9cf88fd72dedd43c5148b3f097c8ca11b12

  • SSDEEP

    6144:9xXLuq5icEIGDqVCunFEQq8D+PYkznla+Y8:9xXiGlEKFENPY+39

Malware Config

Extracted

Family

redline

Botnet

gena

C2

193.233.20.30:4125

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      886b8bec0373f2cddb3c7208965b45afa249834e2dd42a2284122adf296d1a80.exe

    • Size

      362KB

    • MD5

      04fe5f894ef3fe8bf26f8247242826b3

    • SHA1

      3711e871d08e86ec22715cd6c8763a513b46cc4e

    • SHA256

      886b8bec0373f2cddb3c7208965b45afa249834e2dd42a2284122adf296d1a80

    • SHA512

      470cba791b51ef3c730e2abb51d6a2c4cfa80e7536adf2959399e5d6442b9275bff52094cd59feb5a872ae9de6e1e9cf88fd72dedd43c5148b3f097c8ca11b12

    • SSDEEP

      6144:9xXLuq5icEIGDqVCunFEQq8D+PYkznla+Y8:9xXiGlEKFENPY+39

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks