General

  • Target

    83bf9b6342f1a1e0d9476c26154e9c4696899a994e2cf2581713971fb11c6066N.exe

  • Size

    384KB

  • Sample

    241119-wmvmmsyqc1

  • MD5

    1854755adc1845a69cf0717877cbc860

  • SHA1

    5d881498a0fff1845cc9c18278f47cdd2c15a43b

  • SHA256

    83bf9b6342f1a1e0d9476c26154e9c4696899a994e2cf2581713971fb11c6066

  • SHA512

    504530e52638c1984a02e7b2ccc8422c3bac6e8429f929918681504d8622d9a3e77a8a6a14ee76b352a8178b34b43e3c6a7c261bf3dc6bdb5a584f9b6e6f49eb

  • SSDEEP

    6144:jhggEUu25E2ekhl3yMKPHYNj6OxhukRcFEz2cLON/HNN4T:jhggLu2TXyMKQ96OuSMN

Malware Config

Extracted

Family

redline

Botnet

boris

C2

193.233.20.32:4125

Attributes
  • auth_value

    766b5bdf6dbefcf7ca223351952fc38f

Targets

    • Target

      83bf9b6342f1a1e0d9476c26154e9c4696899a994e2cf2581713971fb11c6066N.exe

    • Size

      384KB

    • MD5

      1854755adc1845a69cf0717877cbc860

    • SHA1

      5d881498a0fff1845cc9c18278f47cdd2c15a43b

    • SHA256

      83bf9b6342f1a1e0d9476c26154e9c4696899a994e2cf2581713971fb11c6066

    • SHA512

      504530e52638c1984a02e7b2ccc8422c3bac6e8429f929918681504d8622d9a3e77a8a6a14ee76b352a8178b34b43e3c6a7c261bf3dc6bdb5a584f9b6e6f49eb

    • SSDEEP

      6144:jhggEUu25E2ekhl3yMKPHYNj6OxhukRcFEz2cLON/HNN4T:jhggLu2TXyMKQ96OuSMN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks