General

  • Target

    f58195c4ee2ad2322f3bfc78f390d1850440e1e2bcc101abbeb1c54c3493d34a

  • Size

    391KB

  • Sample

    241115-eavnfaxqd1

  • MD5

    56396c3f090f5506f991ad64677edf91

  • SHA1

    1e9e86a9aa52c7b1889e48400127b95715b65ef5

  • SHA256

    f58195c4ee2ad2322f3bfc78f390d1850440e1e2bcc101abbeb1c54c3493d34a

  • SHA512

    e9a8ad9719baa0db479010d36e1e394aada8755144e24df69f62aa88f90e77d97f2f5ed161d3a699e0c626d6cef765031dc085987718cc452941b8178aec3119

  • SSDEEP

    6144:/pOeL+kqcgnfTjGp/clSVaQo9+5Dixhm3/D5KE7hUH:ROe6kt2fTCtVw+tixhmlh7hA

Malware Config

Extracted

Family

redline

Botnet

gena

C2

193.233.20.30:4125

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      f58195c4ee2ad2322f3bfc78f390d1850440e1e2bcc101abbeb1c54c3493d34a

    • Size

      391KB

    • MD5

      56396c3f090f5506f991ad64677edf91

    • SHA1

      1e9e86a9aa52c7b1889e48400127b95715b65ef5

    • SHA256

      f58195c4ee2ad2322f3bfc78f390d1850440e1e2bcc101abbeb1c54c3493d34a

    • SHA512

      e9a8ad9719baa0db479010d36e1e394aada8755144e24df69f62aa88f90e77d97f2f5ed161d3a699e0c626d6cef765031dc085987718cc452941b8178aec3119

    • SSDEEP

      6144:/pOeL+kqcgnfTjGp/clSVaQo9+5Dixhm3/D5KE7hUH:ROe6kt2fTCtVw+tixhmlh7hA

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks