General

  • Target

    bccf277e08afd13097c874e4822970de21a508f5b95593f9c083cc4b41d08550

  • Size

    394KB

  • Sample

    241105-j4nt7szpfl

  • MD5

    0c3394c251576bbe3e8aeb234cc2df37

  • SHA1

    4888d87586984aa36c2f01d9dc0995c0131d852f

  • SHA256

    bccf277e08afd13097c874e4822970de21a508f5b95593f9c083cc4b41d08550

  • SHA512

    43b7d06bf0ce57dc2973746d300a35565fcb26d0428c8b647791f285a3f130743571457133cb60e10a0573e3505439bb94ee522189e08c53b2f9e50faccafe50

  • SSDEEP

    6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      bccf277e08afd13097c874e4822970de21a508f5b95593f9c083cc4b41d08550

    • Size

      394KB

    • MD5

      0c3394c251576bbe3e8aeb234cc2df37

    • SHA1

      4888d87586984aa36c2f01d9dc0995c0131d852f

    • SHA256

      bccf277e08afd13097c874e4822970de21a508f5b95593f9c083cc4b41d08550

    • SHA512

      43b7d06bf0ce57dc2973746d300a35565fcb26d0428c8b647791f285a3f130743571457133cb60e10a0573e3505439bb94ee522189e08c53b2f9e50faccafe50

    • SSDEEP

      6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks