General

  • Target

    e70e8b9df4a98a17f3ac7883bdb3925b3b2a4550daea84c732e403a1eb9029fb

  • Size

    346KB

  • Sample

    241104-rc1cxsznfw

  • MD5

    d3170effd6ec1430761e51ffa7c6190f

  • SHA1

    50c5a07fe4b3a55c9f6eabb45aa417e6ac83318e

  • SHA256

    e70e8b9df4a98a17f3ac7883bdb3925b3b2a4550daea84c732e403a1eb9029fb

  • SHA512

    6df5ba9b515b6db4227db9db52eca8a9adc90c58e3dad99b9c2f1bc3966b1c77b29efac240ffdb2f38ed27080e69f164bd559913117c8d28b5c7f9f2835e9770

  • SSDEEP

    6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      e70e8b9df4a98a17f3ac7883bdb3925b3b2a4550daea84c732e403a1eb9029fb

    • Size

      346KB

    • MD5

      d3170effd6ec1430761e51ffa7c6190f

    • SHA1

      50c5a07fe4b3a55c9f6eabb45aa417e6ac83318e

    • SHA256

      e70e8b9df4a98a17f3ac7883bdb3925b3b2a4550daea84c732e403a1eb9029fb

    • SHA512

      6df5ba9b515b6db4227db9db52eca8a9adc90c58e3dad99b9c2f1bc3966b1c77b29efac240ffdb2f38ed27080e69f164bd559913117c8d28b5c7f9f2835e9770

    • SSDEEP

      6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks