General

  • Target

    0e70ab75f0f75c316e8aad7195d80cc802509d13594660defc4f008926a779ab

  • Size

    423KB

  • Sample

    241104-1w96xayapg

  • MD5

    6a736658fa537e0bdb31506faea63504

  • SHA1

    c91cd006a8c76f73b420a94cdb1fe322cf805024

  • SHA256

    0e70ab75f0f75c316e8aad7195d80cc802509d13594660defc4f008926a779ab

  • SHA512

    42bf13a8ed71bf8e48f79620b9503cb730633bb362e2e98edaa42800aa7c3141b21f32550b187c12c2479f059f68ffb09ef6216e9d38bf67bbd8dbc6245a7b03

  • SSDEEP

    6144:cMui5ObVmy+0LExccD4HOCL+qzPI1vCyuKkYi82Jzj6efYPV0p:GrLExjiOCyqzPI1vCyuKkBJzjL

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      0e70ab75f0f75c316e8aad7195d80cc802509d13594660defc4f008926a779ab

    • Size

      423KB

    • MD5

      6a736658fa537e0bdb31506faea63504

    • SHA1

      c91cd006a8c76f73b420a94cdb1fe322cf805024

    • SHA256

      0e70ab75f0f75c316e8aad7195d80cc802509d13594660defc4f008926a779ab

    • SHA512

      42bf13a8ed71bf8e48f79620b9503cb730633bb362e2e98edaa42800aa7c3141b21f32550b187c12c2479f059f68ffb09ef6216e9d38bf67bbd8dbc6245a7b03

    • SSDEEP

      6144:cMui5ObVmy+0LExccD4HOCL+qzPI1vCyuKkYi82Jzj6efYPV0p:GrLExjiOCyqzPI1vCyuKkBJzjL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks