General

  • Target

    a9bdccac61874ac262a1ccd2adc0a6bc59897e1bd45f2abe57cace51c963432e

  • Size

    371KB

  • Sample

    241104-xdc7nsvhpr

  • MD5

    766797ac8de7f7f227624a6ec6357d84

  • SHA1

    4c17f08e628c3efe88172a8d7f270190fea50ef0

  • SHA256

    a9bdccac61874ac262a1ccd2adc0a6bc59897e1bd45f2abe57cace51c963432e

  • SHA512

    57eb3afe906ed0413fc680a9f6a37b6e7ffa01c664272a5bfc107f9823429edaf2515891c5603fb1c7d9435322fc311b779f53469d57e7c88dfbf0656eb488ff

  • SSDEEP

    6144:K5T6cP+DC7WJrK3tg4LobitExnGRZyodb7ITsqXigaXwVfh:K5T6cEKWJMW7GR5h7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a9bdccac61874ac262a1ccd2adc0a6bc59897e1bd45f2abe57cace51c963432e

    • Size

      371KB

    • MD5

      766797ac8de7f7f227624a6ec6357d84

    • SHA1

      4c17f08e628c3efe88172a8d7f270190fea50ef0

    • SHA256

      a9bdccac61874ac262a1ccd2adc0a6bc59897e1bd45f2abe57cace51c963432e

    • SHA512

      57eb3afe906ed0413fc680a9f6a37b6e7ffa01c664272a5bfc107f9823429edaf2515891c5603fb1c7d9435322fc311b779f53469d57e7c88dfbf0656eb488ff

    • SSDEEP

      6144:K5T6cP+DC7WJrK3tg4LobitExnGRZyodb7ITsqXigaXwVfh:K5T6cEKWJMW7GR5h7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks