General

  • Target

    e28d7834a7642626e22d7bb5ac758883ace5fe406cba836da6442009b78a384cN.exe

  • Size

    290KB

  • Sample

    241114-gxbvysynfk

  • MD5

    a9848a099b992d918c86bdb6d95860c0

  • SHA1

    34a099d48a989c5b9942df59329f05d88a9ac7b3

  • SHA256

    e28d7834a7642626e22d7bb5ac758883ace5fe406cba836da6442009b78a384c

  • SHA512

    f97ab5a6ee3f112ee342c50b1b5050fe2bb3c9017b8d089a751abb4fd543e8753f9505d777bc3b4a60e4b3e4a75ce2e44f50707d967b66860696e5185d83e3ab

  • SSDEEP

    3072:BYSHhVp7DvonAa4NJA/b61pAHUWlRZvOzPGRajGhrunf3Wp0nnCkdK8hETNBp1D0:jhfZa4NJoNfW6QjGsnf3XCwZExBp1Dh

Malware Config

Extracted

Family

redline

Botnet

gena

C2

193.233.20.30:4125

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      e28d7834a7642626e22d7bb5ac758883ace5fe406cba836da6442009b78a384cN.exe

    • Size

      290KB

    • MD5

      a9848a099b992d918c86bdb6d95860c0

    • SHA1

      34a099d48a989c5b9942df59329f05d88a9ac7b3

    • SHA256

      e28d7834a7642626e22d7bb5ac758883ace5fe406cba836da6442009b78a384c

    • SHA512

      f97ab5a6ee3f112ee342c50b1b5050fe2bb3c9017b8d089a751abb4fd543e8753f9505d777bc3b4a60e4b3e4a75ce2e44f50707d967b66860696e5185d83e3ab

    • SSDEEP

      3072:BYSHhVp7DvonAa4NJA/b61pAHUWlRZvOzPGRajGhrunf3Wp0nnCkdK8hETNBp1D0:jhfZa4NJoNfW6QjGsnf3XCwZExBp1Dh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks