General

  • Target

    7d1a61d1666ae34f58d42524257c92aea9f8670b2555703393811c230a878a4d

  • Size

    297KB

  • Sample

    241104-sxcb9s1pav

  • MD5

    4f380324577e0227c40b3ac6df068321

  • SHA1

    f13e40f2816605d45b13c61b2dd2a1fa80387d56

  • SHA256

    7d1a61d1666ae34f58d42524257c92aea9f8670b2555703393811c230a878a4d

  • SHA512

    9b9a92ea72f0c01cd5e607513100ce638f2221203e7ef9cd1a4e56870e59af1e3c5455252ed75711cc5c6d8ae667ff084df0aed4a7d59f6bde640ac839015cb1

  • SSDEEP

    6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7d1a61d1666ae34f58d42524257c92aea9f8670b2555703393811c230a878a4d

    • Size

      297KB

    • MD5

      4f380324577e0227c40b3ac6df068321

    • SHA1

      f13e40f2816605d45b13c61b2dd2a1fa80387d56

    • SHA256

      7d1a61d1666ae34f58d42524257c92aea9f8670b2555703393811c230a878a4d

    • SHA512

      9b9a92ea72f0c01cd5e607513100ce638f2221203e7ef9cd1a4e56870e59af1e3c5455252ed75711cc5c6d8ae667ff084df0aed4a7d59f6bde640ac839015cb1

    • SSDEEP

      6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks