General

  • Target

    3fbf81bb6d46f83e040a414dc8752e1c4e83d350296bae62ce05aa6c4adc9da1

  • Size

    423KB

  • Sample

    241105-f8wttsxrhm

  • MD5

    a8de93ba9e76c21b335eaebdb6066ba3

  • SHA1

    013ee189847cc723d2a2d275b2ee89e9ee906b80

  • SHA256

    3fbf81bb6d46f83e040a414dc8752e1c4e83d350296bae62ce05aa6c4adc9da1

  • SHA512

    c67d0d19aababacb821e2f251f50984e88fa379ea22cf6655189a419fca9cfa8949dd9ffe1f0f06d12936e0ee915a106f56a7935a8895db47b0f68abf7c55dc7

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      3fbf81bb6d46f83e040a414dc8752e1c4e83d350296bae62ce05aa6c4adc9da1

    • Size

      423KB

    • MD5

      a8de93ba9e76c21b335eaebdb6066ba3

    • SHA1

      013ee189847cc723d2a2d275b2ee89e9ee906b80

    • SHA256

      3fbf81bb6d46f83e040a414dc8752e1c4e83d350296bae62ce05aa6c4adc9da1

    • SHA512

      c67d0d19aababacb821e2f251f50984e88fa379ea22cf6655189a419fca9cfa8949dd9ffe1f0f06d12936e0ee915a106f56a7935a8895db47b0f68abf7c55dc7

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks