General

  • Target

    dfba18267a7ad85473abf016471dc95279701ea2b8b116c946afdc3669a178dc

  • Size

    370KB

  • Sample

    241105-gvx1eaymfn

  • MD5

    9cf17b04c5fdce3142894845b347d509

  • SHA1

    be26b1529c12bf27271329e171928cbaf6b02913

  • SHA256

    dfba18267a7ad85473abf016471dc95279701ea2b8b116c946afdc3669a178dc

  • SHA512

    aad6e5d0c7f92141247cc90b5ff33cdc36e5948717ee6dbf18205bbb4a46d464084acdb2747dbabfba63df21cd4618336fbb927e99d55a53b1379958189aa4e9

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      dfba18267a7ad85473abf016471dc95279701ea2b8b116c946afdc3669a178dc

    • Size

      370KB

    • MD5

      9cf17b04c5fdce3142894845b347d509

    • SHA1

      be26b1529c12bf27271329e171928cbaf6b02913

    • SHA256

      dfba18267a7ad85473abf016471dc95279701ea2b8b116c946afdc3669a178dc

    • SHA512

      aad6e5d0c7f92141247cc90b5ff33cdc36e5948717ee6dbf18205bbb4a46d464084acdb2747dbabfba63df21cd4618336fbb927e99d55a53b1379958189aa4e9

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks