General

  • Target

    7fe3babff6c1a9eae709e30c635c31ed53f5f7fe04f1b9609a77005ea35eb9e6

  • Size

    427KB

  • Sample

    241104-zq62maxbra

  • MD5

    24a4edd2f4cc8a1129c9d61179fa5618

  • SHA1

    ed2eb4c04aa972f69f9e434b0f63deaa7fa21b96

  • SHA256

    7fe3babff6c1a9eae709e30c635c31ed53f5f7fe04f1b9609a77005ea35eb9e6

  • SHA512

    8ad0e3b2d9e0782549c58421e5dda600ba404a531c3cdbe6d15869841fa6a1b641dfb49621a9b18169430c38b9a4d4c8508444b5b2c007782f0ab4674fe3d94a

  • SSDEEP

    6144:XxnVbTjtyULhQVfiYUbqBAXdfWe22Yi5/L/ngOBWJfr1PqaRJ0:XxVbsgcinqBAXNT22Yi5/L/n6r1Pq

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7fe3babff6c1a9eae709e30c635c31ed53f5f7fe04f1b9609a77005ea35eb9e6

    • Size

      427KB

    • MD5

      24a4edd2f4cc8a1129c9d61179fa5618

    • SHA1

      ed2eb4c04aa972f69f9e434b0f63deaa7fa21b96

    • SHA256

      7fe3babff6c1a9eae709e30c635c31ed53f5f7fe04f1b9609a77005ea35eb9e6

    • SHA512

      8ad0e3b2d9e0782549c58421e5dda600ba404a531c3cdbe6d15869841fa6a1b641dfb49621a9b18169430c38b9a4d4c8508444b5b2c007782f0ab4674fe3d94a

    • SSDEEP

      6144:XxnVbTjtyULhQVfiYUbqBAXdfWe22Yi5/L/ngOBWJfr1PqaRJ0:XxVbsgcinqBAXNT22Yi5/L/n6r1Pq

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks