General

  • Target

    99b9234cd6a1fe32b5430f444150ee0a27c5f4fd506f6b2e3a175e4bd838cf4b

  • Size

    371KB

  • Sample

    241105-mvsctazhnq

  • MD5

    54165d9bb1731e7f39304f35415a8412

  • SHA1

    0a30611ecaca225273eb646e3c4523e54635670d

  • SHA256

    99b9234cd6a1fe32b5430f444150ee0a27c5f4fd506f6b2e3a175e4bd838cf4b

  • SHA512

    47ec1121973f9c49243963b61963db4bf65f296649ed61b84740775a31dfba55716e60bd10101cbe6f691b55652789a024d8a709d5d5d71e9c13bbe30cc30596

  • SSDEEP

    6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      99b9234cd6a1fe32b5430f444150ee0a27c5f4fd506f6b2e3a175e4bd838cf4b

    • Size

      371KB

    • MD5

      54165d9bb1731e7f39304f35415a8412

    • SHA1

      0a30611ecaca225273eb646e3c4523e54635670d

    • SHA256

      99b9234cd6a1fe32b5430f444150ee0a27c5f4fd506f6b2e3a175e4bd838cf4b

    • SHA512

      47ec1121973f9c49243963b61963db4bf65f296649ed61b84740775a31dfba55716e60bd10101cbe6f691b55652789a024d8a709d5d5d71e9c13bbe30cc30596

    • SSDEEP

      6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks