General

  • Target

    3ccb08781ad0391d02df7851b23602a81fc9368f6990cb7a5d8f63c0bea8e3c3

  • Size

    297KB

  • Sample

    241105-p24qjatnhj

  • MD5

    7cbbaed9f2d5930d23ce6f21750de489

  • SHA1

    4ecc554408e0a1654bc639516a0a7366aacb046c

  • SHA256

    3ccb08781ad0391d02df7851b23602a81fc9368f6990cb7a5d8f63c0bea8e3c3

  • SHA512

    120881276ed5594fdf433ea38a25d30a0427a2bdf5a0747907bcb6a4694f4084ae50b8e07a38c03de68bfb74a6229e0f887d68c2eab6e19886e38938cc217be1

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      3ccb08781ad0391d02df7851b23602a81fc9368f6990cb7a5d8f63c0bea8e3c3

    • Size

      297KB

    • MD5

      7cbbaed9f2d5930d23ce6f21750de489

    • SHA1

      4ecc554408e0a1654bc639516a0a7366aacb046c

    • SHA256

      3ccb08781ad0391d02df7851b23602a81fc9368f6990cb7a5d8f63c0bea8e3c3

    • SHA512

      120881276ed5594fdf433ea38a25d30a0427a2bdf5a0747907bcb6a4694f4084ae50b8e07a38c03de68bfb74a6229e0f887d68c2eab6e19886e38938cc217be1

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks