General

  • Target

    a73140e654597d79e49c6e7259587ae69ecb9908c3e99d3cc847a46b816a9981

  • Size

    349KB

  • Sample

    241114-bpf7tawkcl

  • MD5

    4b67cf9c615508175799e3c67d15b41a

  • SHA1

    fd0e4f42d2c335a616d629067f9489fb619adb16

  • SHA256

    a73140e654597d79e49c6e7259587ae69ecb9908c3e99d3cc847a46b816a9981

  • SHA512

    601080c4cea2a599fc65cd985bed5f00edd1f81ae07736c1a5f6062013a54f63a4e30ef5615672a91d454b35837c53b0c6564906248624069d7e7c178923e0a5

  • SSDEEP

    6144:uOgML34cKDDyHqFv3/KJ0qs8UAgu1SvcOpb6iCJxV2BBGv/sh8:uOj74DwqFv3oTs8UqEEOV6zJaQsh8

Malware Config

Extracted

Family

redline

Botnet

gena

C2

193.233.20.30:4125

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      a73140e654597d79e49c6e7259587ae69ecb9908c3e99d3cc847a46b816a9981

    • Size

      349KB

    • MD5

      4b67cf9c615508175799e3c67d15b41a

    • SHA1

      fd0e4f42d2c335a616d629067f9489fb619adb16

    • SHA256

      a73140e654597d79e49c6e7259587ae69ecb9908c3e99d3cc847a46b816a9981

    • SHA512

      601080c4cea2a599fc65cd985bed5f00edd1f81ae07736c1a5f6062013a54f63a4e30ef5615672a91d454b35837c53b0c6564906248624069d7e7c178923e0a5

    • SSDEEP

      6144:uOgML34cKDDyHqFv3/KJ0qs8UAgu1SvcOpb6iCJxV2BBGv/sh8:uOj74DwqFv3oTs8UqEEOV6zJaQsh8

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks