General

  • Target

    f6796cb9fbf7b898d738e375afbf7c1a68b0e3ba24e6481b2309bc066d18982f

  • Size

    298KB

  • Sample

    241104-wymfeavcle

  • MD5

    97978087bc99d4b924664c0e99a00eeb

  • SHA1

    4ae9b558c223e6c6c71fa8cfd8945f132fcc7553

  • SHA256

    f6796cb9fbf7b898d738e375afbf7c1a68b0e3ba24e6481b2309bc066d18982f

  • SHA512

    b34f6dcb29057fc55bfccc7a5ae59877235d2f69dd55ad57e4343e68b817013818a2a954b06b72f6652de584d5e9edb9635b25c3bbd5b9ac6de86cbd122dc727

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f6796cb9fbf7b898d738e375afbf7c1a68b0e3ba24e6481b2309bc066d18982f

    • Size

      298KB

    • MD5

      97978087bc99d4b924664c0e99a00eeb

    • SHA1

      4ae9b558c223e6c6c71fa8cfd8945f132fcc7553

    • SHA256

      f6796cb9fbf7b898d738e375afbf7c1a68b0e3ba24e6481b2309bc066d18982f

    • SHA512

      b34f6dcb29057fc55bfccc7a5ae59877235d2f69dd55ad57e4343e68b817013818a2a954b06b72f6652de584d5e9edb9635b25c3bbd5b9ac6de86cbd122dc727

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks