General

  • Target

    a97f0b8ad12bf196073d1db814b1e1e7386e512600f3b8f8933990117754e082

  • Size

    371KB

  • Sample

    241105-hjx2pswgla

  • MD5

    fa411bd1ea75db37000719548dca09d3

  • SHA1

    3c1ac46d198f3496ce4b0e96503f299228f81213

  • SHA256

    a97f0b8ad12bf196073d1db814b1e1e7386e512600f3b8f8933990117754e082

  • SHA512

    111003524759dfbe41546962d30cab1c154cb58f9d1b74ce8cab8f8a67bcdce7a819dc2d8f14f4651612071f385df3718e33f0c995c06e45624fd726ccf6b2c6

  • SSDEEP

    6144:I1c95HIATYxl4z3GTkAe0YnGDw2IKcO/w+XiILU6dqb7ITsqXigaXwVfi:I1c95H7TYrCYkAepCw2oOI4kL7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a97f0b8ad12bf196073d1db814b1e1e7386e512600f3b8f8933990117754e082

    • Size

      371KB

    • MD5

      fa411bd1ea75db37000719548dca09d3

    • SHA1

      3c1ac46d198f3496ce4b0e96503f299228f81213

    • SHA256

      a97f0b8ad12bf196073d1db814b1e1e7386e512600f3b8f8933990117754e082

    • SHA512

      111003524759dfbe41546962d30cab1c154cb58f9d1b74ce8cab8f8a67bcdce7a819dc2d8f14f4651612071f385df3718e33f0c995c06e45624fd726ccf6b2c6

    • SSDEEP

      6144:I1c95HIATYxl4z3GTkAe0YnGDw2IKcO/w+XiILU6dqb7ITsqXigaXwVfi:I1c95H7TYrCYkAepCw2oOI4kL7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks