General

  • Target

    6952506385d5fa0c55439f714aed1a0efb94ae89841068510e56ee68b0c25122

  • Size

    298KB

  • Sample

    241105-g8a3ssypem

  • MD5

    86729613fdc26f9109091f5b7f65cf54

  • SHA1

    d7df9a208c75e059953f6309ba1809ad2b5d7403

  • SHA256

    6952506385d5fa0c55439f714aed1a0efb94ae89841068510e56ee68b0c25122

  • SHA512

    280fd4b33f47caa2d3bffea9e04e9d332f73f43c9a4a409965257c4306f33b044a6a519507e57172b2f0a5dc47c6d5249fd1b3d54483df6e4bca9f893d04f6ee

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6952506385d5fa0c55439f714aed1a0efb94ae89841068510e56ee68b0c25122

    • Size

      298KB

    • MD5

      86729613fdc26f9109091f5b7f65cf54

    • SHA1

      d7df9a208c75e059953f6309ba1809ad2b5d7403

    • SHA256

      6952506385d5fa0c55439f714aed1a0efb94ae89841068510e56ee68b0c25122

    • SHA512

      280fd4b33f47caa2d3bffea9e04e9d332f73f43c9a4a409965257c4306f33b044a6a519507e57172b2f0a5dc47c6d5249fd1b3d54483df6e4bca9f893d04f6ee

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks