General

  • Target

    1f5964448003dd2af658df3e9138a9edb12ecd4a30b348096369e83c68e9a3d0N.exe

  • Size

    175KB

  • Sample

    241119-gmtb9asajl

  • MD5

    44dc5523059dc6b53d8d9e249002acc0

  • SHA1

    9d2c1a81f9a9fbc6ad21f9c78949b072ceecb1dd

  • SHA256

    1f5964448003dd2af658df3e9138a9edb12ecd4a30b348096369e83c68e9a3d0

  • SHA512

    6ac85f176affea68cbb92815c7a924971ad4efd8adda7c0e6b9a4a43e06fe844ee487300d58afa2568f3f31a30c5038bd3034c36f1cdb0a81eec40a5fb250ecb

  • SSDEEP

    3072:BxqZW11a2kX8fkRyeiBWep3FhhFvxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOf:zqZkkgN1hh

Malware Config

Extracted

Family

redline

Botnet

fabio

C2

193.233.20.27:4123

Attributes
  • auth_value

    56b82736c3f56b13be8e64c87d2cf9e5

Targets

    • Target

      1f5964448003dd2af658df3e9138a9edb12ecd4a30b348096369e83c68e9a3d0N.exe

    • Size

      175KB

    • MD5

      44dc5523059dc6b53d8d9e249002acc0

    • SHA1

      9d2c1a81f9a9fbc6ad21f9c78949b072ceecb1dd

    • SHA256

      1f5964448003dd2af658df3e9138a9edb12ecd4a30b348096369e83c68e9a3d0

    • SHA512

      6ac85f176affea68cbb92815c7a924971ad4efd8adda7c0e6b9a4a43e06fe844ee487300d58afa2568f3f31a30c5038bd3034c36f1cdb0a81eec40a5fb250ecb

    • SSDEEP

      3072:BxqZW11a2kX8fkRyeiBWep3FhhFvxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOf:zqZkkgN1hh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks