General

  • Target

    63b39a7346b7b20dc0c2ebc038cd26a40f63bc8029f0b65caf3ad6efd3a56b01

  • Size

    438KB

  • Sample

    241105-eckagsvbrl

  • MD5

    d4adeb5eb5c33b2bfd2e5855c322e865

  • SHA1

    061043f0858b18ae5de71ebdeb9cba15730e2b69

  • SHA256

    63b39a7346b7b20dc0c2ebc038cd26a40f63bc8029f0b65caf3ad6efd3a56b01

  • SHA512

    5dd7ec847e2d69bd24d3a23f5807213efd1f0f616c21a846cf6b42cb8026a680a27f8fef7fd0dc6ee115b69ca354c200c7b4df80b133a76ffb8433224d4a4729

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      63b39a7346b7b20dc0c2ebc038cd26a40f63bc8029f0b65caf3ad6efd3a56b01

    • Size

      438KB

    • MD5

      d4adeb5eb5c33b2bfd2e5855c322e865

    • SHA1

      061043f0858b18ae5de71ebdeb9cba15730e2b69

    • SHA256

      63b39a7346b7b20dc0c2ebc038cd26a40f63bc8029f0b65caf3ad6efd3a56b01

    • SHA512

      5dd7ec847e2d69bd24d3a23f5807213efd1f0f616c21a846cf6b42cb8026a680a27f8fef7fd0dc6ee115b69ca354c200c7b4df80b133a76ffb8433224d4a4729

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks