General

  • Target

    8f7dacbe45f0394897d1ab38db5bc3968e11987d93273fc110a9c9e4a67cd698.exe

  • Size

    362KB

  • Sample

    241113-w9a7hsxdpn

  • MD5

    22631d5e4828b562fe2c232f5ca63fd7

  • SHA1

    5286661439180c0034f02eca43be6ce8519a2713

  • SHA256

    8f7dacbe45f0394897d1ab38db5bc3968e11987d93273fc110a9c9e4a67cd698

  • SHA512

    35d31692bf8627e1631eac738878c9015b2a40a17120779d90a9fe1959d837ee38f166448305813496ff820226341a8a77203ac0063976c69817c3bea151dbc1

  • SSDEEP

    6144:2xXLuq5icEIGDqVCunFEQq8D+PYkznla+Yk:2xXiGlEKFENPY+33

Malware Config

Extracted

Family

redline

Botnet

gena

C2

193.233.20.30:4125

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      8f7dacbe45f0394897d1ab38db5bc3968e11987d93273fc110a9c9e4a67cd698.exe

    • Size

      362KB

    • MD5

      22631d5e4828b562fe2c232f5ca63fd7

    • SHA1

      5286661439180c0034f02eca43be6ce8519a2713

    • SHA256

      8f7dacbe45f0394897d1ab38db5bc3968e11987d93273fc110a9c9e4a67cd698

    • SHA512

      35d31692bf8627e1631eac738878c9015b2a40a17120779d90a9fe1959d837ee38f166448305813496ff820226341a8a77203ac0063976c69817c3bea151dbc1

    • SSDEEP

      6144:2xXLuq5icEIGDqVCunFEQq8D+PYkznla+Yk:2xXiGlEKFENPY+33

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks