General

  • Target

    7e011712d5b26999e92ad06cd814f3d117a85e11e19c43282205ab71b2909fd1

  • Size

    297KB

  • Sample

    241105-l8j3xs1rcp

  • MD5

    8777947745aad085c6cfdb5f2157a8ce

  • SHA1

    f2998ebfd7f34a3c350234e2b6c5761c924bc1b9

  • SHA256

    7e011712d5b26999e92ad06cd814f3d117a85e11e19c43282205ab71b2909fd1

  • SHA512

    b44ee60279da3c565da485e6ecdd2d8454e1fa7ed3638eb18d28f2fe1fc62e2ce0c2df1fe43c2635cdb97be5da6938686645304597137c51c87290ec2d22d99a

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7e011712d5b26999e92ad06cd814f3d117a85e11e19c43282205ab71b2909fd1

    • Size

      297KB

    • MD5

      8777947745aad085c6cfdb5f2157a8ce

    • SHA1

      f2998ebfd7f34a3c350234e2b6c5761c924bc1b9

    • SHA256

      7e011712d5b26999e92ad06cd814f3d117a85e11e19c43282205ab71b2909fd1

    • SHA512

      b44ee60279da3c565da485e6ecdd2d8454e1fa7ed3638eb18d28f2fe1fc62e2ce0c2df1fe43c2635cdb97be5da6938686645304597137c51c87290ec2d22d99a

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks