General

  • Target

    623feb4d835d29a975fa3d03ba964e3a7e8d59aa92c2d1cd52c750911d6f9d37N

  • Size

    391KB

  • Sample

    241113-j1gxgsyalb

  • MD5

    509235399115f47c13a11b4327ff1920

  • SHA1

    e3c6999754214f84812c502d31ffbfd2318ee61c

  • SHA256

    623feb4d835d29a975fa3d03ba964e3a7e8d59aa92c2d1cd52c750911d6f9d37

  • SHA512

    4fcaa45ecec8f143a279a40ee5a70b0fb811836f9afa06bf9fc4d56d2e06a9966c47b34b6ce200eb7180ca9b199ee947ae0063efe131984c5ed972210d119cb5

  • SSDEEP

    6144:5OLLQdlhAjJzhx7BDmK/vsQXRnl64VygWksxj3iL/U4qL:5OLkdlhAjJFD3vDBUSWkUyvqL

Malware Config

Extracted

Family

redline

Botnet

gena

C2

193.233.20.30:4125

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      623feb4d835d29a975fa3d03ba964e3a7e8d59aa92c2d1cd52c750911d6f9d37N

    • Size

      391KB

    • MD5

      509235399115f47c13a11b4327ff1920

    • SHA1

      e3c6999754214f84812c502d31ffbfd2318ee61c

    • SHA256

      623feb4d835d29a975fa3d03ba964e3a7e8d59aa92c2d1cd52c750911d6f9d37

    • SHA512

      4fcaa45ecec8f143a279a40ee5a70b0fb811836f9afa06bf9fc4d56d2e06a9966c47b34b6ce200eb7180ca9b199ee947ae0063efe131984c5ed972210d119cb5

    • SSDEEP

      6144:5OLLQdlhAjJzhx7BDmK/vsQXRnl64VygWksxj3iL/U4qL:5OLkdlhAjJFD3vDBUSWkUyvqL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks