General

  • Target

    05fa60b6be62f23b084d11dff7e8ec02d631b1a8abb3d622b614c05f737e0f60

  • Size

    371KB

  • Sample

    241105-kmmq9axmct

  • MD5

    bb7c1d9fe21d2d81a52b9ad569373f05

  • SHA1

    0851d850e43e6cf130bbbbdda17479d281c0f2f9

  • SHA256

    05fa60b6be62f23b084d11dff7e8ec02d631b1a8abb3d622b614c05f737e0f60

  • SHA512

    8a65c689f2b5423c82afc53f10032452fa691a0eed3ef07c3f0caa603f9568919c988789319c7e5e43a840d8aafbbc15f0e01baaa45b02271a7c7a34f53b6124

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      05fa60b6be62f23b084d11dff7e8ec02d631b1a8abb3d622b614c05f737e0f60

    • Size

      371KB

    • MD5

      bb7c1d9fe21d2d81a52b9ad569373f05

    • SHA1

      0851d850e43e6cf130bbbbdda17479d281c0f2f9

    • SHA256

      05fa60b6be62f23b084d11dff7e8ec02d631b1a8abb3d622b614c05f737e0f60

    • SHA512

      8a65c689f2b5423c82afc53f10032452fa691a0eed3ef07c3f0caa603f9568919c988789319c7e5e43a840d8aafbbc15f0e01baaa45b02271a7c7a34f53b6124

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks