General

  • Target

    76456a69eb5ad61c0b6936fb921f0a67c2afa1e4088be56e39b92f3d7bae6a84

  • Size

    298KB

  • Sample

    241104-q3gstszhmg

  • MD5

    d600e17d162f0c2c64766cd96d84218c

  • SHA1

    0dd25c009411003b9e9651e34ce28d14238d4d43

  • SHA256

    76456a69eb5ad61c0b6936fb921f0a67c2afa1e4088be56e39b92f3d7bae6a84

  • SHA512

    9887d3083f7eb15f4248e2090928e499e7ea6079807f2f64dc04afdc6c6f8a421d3e9bbf788d9d980ccf5ab2d612acfd1853594ba2f9603c1cd048ac43c5b448

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      76456a69eb5ad61c0b6936fb921f0a67c2afa1e4088be56e39b92f3d7bae6a84

    • Size

      298KB

    • MD5

      d600e17d162f0c2c64766cd96d84218c

    • SHA1

      0dd25c009411003b9e9651e34ce28d14238d4d43

    • SHA256

      76456a69eb5ad61c0b6936fb921f0a67c2afa1e4088be56e39b92f3d7bae6a84

    • SHA512

      9887d3083f7eb15f4248e2090928e499e7ea6079807f2f64dc04afdc6c6f8a421d3e9bbf788d9d980ccf5ab2d612acfd1853594ba2f9603c1cd048ac43c5b448

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks