General

  • Target

    65480b42c78f6777eee00c264992af4f6be58c47ef7d1266dfa606b825de8a5f

  • Size

    373KB

  • Sample

    241104-yaxmkswemq

  • MD5

    a05c2a9caced16c0774ba96949823b19

  • SHA1

    7cf96ee95d0d5e3e176008ec3133a5e6bc597b5c

  • SHA256

    65480b42c78f6777eee00c264992af4f6be58c47ef7d1266dfa606b825de8a5f

  • SHA512

    0030ea648db0383854a18805041b99677ee801777434995c6c78b6925749f9dd3349ab4517927d9c98b87d25defb61eda5385298ac045a5ab72f4b37ff7eb297

  • SSDEEP

    6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      65480b42c78f6777eee00c264992af4f6be58c47ef7d1266dfa606b825de8a5f

    • Size

      373KB

    • MD5

      a05c2a9caced16c0774ba96949823b19

    • SHA1

      7cf96ee95d0d5e3e176008ec3133a5e6bc597b5c

    • SHA256

      65480b42c78f6777eee00c264992af4f6be58c47ef7d1266dfa606b825de8a5f

    • SHA512

      0030ea648db0383854a18805041b99677ee801777434995c6c78b6925749f9dd3349ab4517927d9c98b87d25defb61eda5385298ac045a5ab72f4b37ff7eb297

    • SSDEEP

      6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks