General

  • Target

    aa0f0a71c6ee354049e0d0feaacbfce3806b410d4360ebdef56a93b67596b790

  • Size

    297KB

  • Sample

    241104-wpx6jsvarg

  • MD5

    96d676a1229a245c63d2755f64a182bb

  • SHA1

    1beececb172998b2fc217f4320f00ddf840e973e

  • SHA256

    aa0f0a71c6ee354049e0d0feaacbfce3806b410d4360ebdef56a93b67596b790

  • SHA512

    cce5df2392a92408f1aac14329b8cbfd0466cb98d9936468b28c081fea696a8b40a065f3ce3fd97e5382b03935dcf5ebf9a61c8ace7c4f5c62c54000f0c02cb0

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      aa0f0a71c6ee354049e0d0feaacbfce3806b410d4360ebdef56a93b67596b790

    • Size

      297KB

    • MD5

      96d676a1229a245c63d2755f64a182bb

    • SHA1

      1beececb172998b2fc217f4320f00ddf840e973e

    • SHA256

      aa0f0a71c6ee354049e0d0feaacbfce3806b410d4360ebdef56a93b67596b790

    • SHA512

      cce5df2392a92408f1aac14329b8cbfd0466cb98d9936468b28c081fea696a8b40a065f3ce3fd97e5382b03935dcf5ebf9a61c8ace7c4f5c62c54000f0c02cb0

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks