General

  • Target

    9f54c2172e2a535232f2d3ded26177fcdb61b7cdc0b380e82ac0f0195e697056

  • Size

    428KB

  • Sample

    241104-snfy4a1hra

  • MD5

    fbf2e153c248eb3117d614f051592315

  • SHA1

    6926323fe2429d2c40d7dfb41e1410a954a22a53

  • SHA256

    9f54c2172e2a535232f2d3ded26177fcdb61b7cdc0b380e82ac0f0195e697056

  • SHA512

    83494e23f413bd371b7180e8658406117c2c66bfa2784d8584ad457208f49c22654eeb78e1f913359011ad48907986a23d5f71bc2c7659dfdf8752271d042a6f

  • SSDEEP

    6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      9f54c2172e2a535232f2d3ded26177fcdb61b7cdc0b380e82ac0f0195e697056

    • Size

      428KB

    • MD5

      fbf2e153c248eb3117d614f051592315

    • SHA1

      6926323fe2429d2c40d7dfb41e1410a954a22a53

    • SHA256

      9f54c2172e2a535232f2d3ded26177fcdb61b7cdc0b380e82ac0f0195e697056

    • SHA512

      83494e23f413bd371b7180e8658406117c2c66bfa2784d8584ad457208f49c22654eeb78e1f913359011ad48907986a23d5f71bc2c7659dfdf8752271d042a6f

    • SSDEEP

      6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks