General

  • Target

    60bd9c05ed3c1286ddbf90eec933b729eace76cd8f3140f4afbbe680ddac00a2

  • Size

    438KB

  • Sample

    241104-t4dpcatdlm

  • MD5

    958fa03a393e9f38b26464fddaf5a373

  • SHA1

    51d07a1a22f6fb3f25074504f2d09c94b5bd820e

  • SHA256

    60bd9c05ed3c1286ddbf90eec933b729eace76cd8f3140f4afbbe680ddac00a2

  • SHA512

    0604143d70f3b48aa97a2346d2daf4777d411d410738c30c605749554209fa982e5e682b6799b04bcddb1f541dd9603dd90baae80fd380cc990cbeebb9a11b26

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      60bd9c05ed3c1286ddbf90eec933b729eace76cd8f3140f4afbbe680ddac00a2

    • Size

      438KB

    • MD5

      958fa03a393e9f38b26464fddaf5a373

    • SHA1

      51d07a1a22f6fb3f25074504f2d09c94b5bd820e

    • SHA256

      60bd9c05ed3c1286ddbf90eec933b729eace76cd8f3140f4afbbe680ddac00a2

    • SHA512

      0604143d70f3b48aa97a2346d2daf4777d411d410738c30c605749554209fa982e5e682b6799b04bcddb1f541dd9603dd90baae80fd380cc990cbeebb9a11b26

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks