General

  • Target

    df81b095f12d849c135a31020ee6859dd8d9fa37f2eb97346a141c23be16a98e

  • Size

    371KB

  • Sample

    241105-fs7w6avgjb

  • MD5

    9f7ae8f4a6b99650a538dab09df7248a

  • SHA1

    2d09f9d22d4f7cc5c9c52f0f857bd3bc962de655

  • SHA256

    df81b095f12d849c135a31020ee6859dd8d9fa37f2eb97346a141c23be16a98e

  • SHA512

    40ec15d74f3a5d16ae4e79dc74e8065554fd7c02717f03a3b1496d289f75ce884273f093419b103540a6ef0387b003e996f83cc1967d29632611906a548a6492

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      df81b095f12d849c135a31020ee6859dd8d9fa37f2eb97346a141c23be16a98e

    • Size

      371KB

    • MD5

      9f7ae8f4a6b99650a538dab09df7248a

    • SHA1

      2d09f9d22d4f7cc5c9c52f0f857bd3bc962de655

    • SHA256

      df81b095f12d849c135a31020ee6859dd8d9fa37f2eb97346a141c23be16a98e

    • SHA512

      40ec15d74f3a5d16ae4e79dc74e8065554fd7c02717f03a3b1496d289f75ce884273f093419b103540a6ef0387b003e996f83cc1967d29632611906a548a6492

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks