General

  • Target

    55288f32c38927434b49f9cf1d6fd5a79d44db877c6bacfc8dce59d1f79d8b9c

  • Size

    371KB

  • Sample

    241104-vwp8vasrfz

  • MD5

    0a695b115947f7174c0a24ab4977b3a2

  • SHA1

    3ecf41228c6999667afe7e1dfb184f1c34d1eb3f

  • SHA256

    55288f32c38927434b49f9cf1d6fd5a79d44db877c6bacfc8dce59d1f79d8b9c

  • SHA512

    5c31bfb9539c7491ead13d3b4a84a9174fd0164c205e32d4f7b3661fe971bc9407d47f08ec19ebf876ad26bc4ea96aa3790a45317cfecd04ccbc975aa5bd1b4d

  • SSDEEP

    6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      55288f32c38927434b49f9cf1d6fd5a79d44db877c6bacfc8dce59d1f79d8b9c

    • Size

      371KB

    • MD5

      0a695b115947f7174c0a24ab4977b3a2

    • SHA1

      3ecf41228c6999667afe7e1dfb184f1c34d1eb3f

    • SHA256

      55288f32c38927434b49f9cf1d6fd5a79d44db877c6bacfc8dce59d1f79d8b9c

    • SHA512

      5c31bfb9539c7491ead13d3b4a84a9174fd0164c205e32d4f7b3661fe971bc9407d47f08ec19ebf876ad26bc4ea96aa3790a45317cfecd04ccbc975aa5bd1b4d

    • SSDEEP

      6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks