General

  • Target

    9c8a81bbd0f1078f05fa06f7b256e3ac55b2d55bd897693218cee5ee81b67ee1

  • Size

    297KB

  • Sample

    241105-pc6tla1gmq

  • MD5

    685c4c55f942c6b731580623a30030d6

  • SHA1

    1d763826ef02a021289bf680052361c38c0c266c

  • SHA256

    9c8a81bbd0f1078f05fa06f7b256e3ac55b2d55bd897693218cee5ee81b67ee1

  • SHA512

    0445d3d003d4c65ddb53842dea8a4c767c42d09b1d1a7d101a16f43d754d7545e628bd840545706dcb4f4490e00b74f5ea60bb70e1eab7096fff501b786badc3

  • SSDEEP

    6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      9c8a81bbd0f1078f05fa06f7b256e3ac55b2d55bd897693218cee5ee81b67ee1

    • Size

      297KB

    • MD5

      685c4c55f942c6b731580623a30030d6

    • SHA1

      1d763826ef02a021289bf680052361c38c0c266c

    • SHA256

      9c8a81bbd0f1078f05fa06f7b256e3ac55b2d55bd897693218cee5ee81b67ee1

    • SHA512

      0445d3d003d4c65ddb53842dea8a4c767c42d09b1d1a7d101a16f43d754d7545e628bd840545706dcb4f4490e00b74f5ea60bb70e1eab7096fff501b786badc3

    • SSDEEP

      6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks