General

  • Target

    15c820735b799b00f12824ff176ba8eabb9ba59353ee5f9d0f4420972d63cf5f

  • Size

    297KB

  • Sample

    241105-ejdraavcqp

  • MD5

    ff479a9c492501c06552c9d95e3205a3

  • SHA1

    72510db90f6d66c11c9c1277564bbb84cfe9b5f4

  • SHA256

    15c820735b799b00f12824ff176ba8eabb9ba59353ee5f9d0f4420972d63cf5f

  • SHA512

    b70f99b1599333b1131272e8464a4d15b002f55e4d163cebea70f16714affda48b6678fa6f08500eba470330c99c743aee2cf0c3bb34b312576f6e19dbe6590c

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      15c820735b799b00f12824ff176ba8eabb9ba59353ee5f9d0f4420972d63cf5f

    • Size

      297KB

    • MD5

      ff479a9c492501c06552c9d95e3205a3

    • SHA1

      72510db90f6d66c11c9c1277564bbb84cfe9b5f4

    • SHA256

      15c820735b799b00f12824ff176ba8eabb9ba59353ee5f9d0f4420972d63cf5f

    • SHA512

      b70f99b1599333b1131272e8464a4d15b002f55e4d163cebea70f16714affda48b6678fa6f08500eba470330c99c743aee2cf0c3bb34b312576f6e19dbe6590c

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks