General

  • Target

    91a9c51a69abd96f04367b405f8ebbb77b5d30e11a5ace42bcf792ac1e8f1ce8

  • Size

    290KB

  • Sample

    241115-akgr4syqhl

  • MD5

    1654fc17a9406f9099808ef15b7e38b8

  • SHA1

    aad2ea3f6dad662f7d3fda6dd6d28102ae121702

  • SHA256

    91a9c51a69abd96f04367b405f8ebbb77b5d30e11a5ace42bcf792ac1e8f1ce8

  • SHA512

    a8c39d82d81ba5250248e9a616410fa1357cdf5fcf1fb202d36032b513af2842561e1f3b44c45915d8617cd0f2dafacccc62e57c3aecb535b2ef6524754cc122

  • SSDEEP

    3072:ykPRHZ/nIozrk5QcVM6AdlGXcuHFydrqljJpndfds2E8ckGj27sp6t4tsslb0kOq:rR57CyrlGXFcAnpchxrTB0kO9ddM

Malware Config

Extracted

Family

redline

Botnet

gena

C2

193.233.20.30:4125

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      91a9c51a69abd96f04367b405f8ebbb77b5d30e11a5ace42bcf792ac1e8f1ce8

    • Size

      290KB

    • MD5

      1654fc17a9406f9099808ef15b7e38b8

    • SHA1

      aad2ea3f6dad662f7d3fda6dd6d28102ae121702

    • SHA256

      91a9c51a69abd96f04367b405f8ebbb77b5d30e11a5ace42bcf792ac1e8f1ce8

    • SHA512

      a8c39d82d81ba5250248e9a616410fa1357cdf5fcf1fb202d36032b513af2842561e1f3b44c45915d8617cd0f2dafacccc62e57c3aecb535b2ef6524754cc122

    • SSDEEP

      3072:ykPRHZ/nIozrk5QcVM6AdlGXcuHFydrqljJpndfds2E8ckGj27sp6t4tsslb0kOq:rR57CyrlGXFcAnpchxrTB0kO9ddM

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks