General

  • Target

    2c8d65cf993bfe434607f475b08d20427ce058eb19b4595b7d3dd9b1ab676402

  • Size

    438KB

  • Sample

    241105-ef91bavcmm

  • MD5

    ae30f1466c3081a22505abef908fb79d

  • SHA1

    dd4dd9820e4d2344e08749edc136d920d93cceaf

  • SHA256

    2c8d65cf993bfe434607f475b08d20427ce058eb19b4595b7d3dd9b1ab676402

  • SHA512

    45fa2f88830ba1ef6bfaa1d7635c55bdf2a2bf2cbc66304c67648988ae073ee6fede60b01c2eb55161af1715f25fef0398cc1123ff3b3fe69a154037f6db49da

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2c8d65cf993bfe434607f475b08d20427ce058eb19b4595b7d3dd9b1ab676402

    • Size

      438KB

    • MD5

      ae30f1466c3081a22505abef908fb79d

    • SHA1

      dd4dd9820e4d2344e08749edc136d920d93cceaf

    • SHA256

      2c8d65cf993bfe434607f475b08d20427ce058eb19b4595b7d3dd9b1ab676402

    • SHA512

      45fa2f88830ba1ef6bfaa1d7635c55bdf2a2bf2cbc66304c67648988ae073ee6fede60b01c2eb55161af1715f25fef0398cc1123ff3b3fe69a154037f6db49da

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks