General

  • Target

    c9c67a26b65b124bc6e415d389cce42d603582e6c839e86446d5eae4aeea93eb

  • Size

    383KB

  • Sample

    241105-pxycyssbnj

  • MD5

    d42e3ba7a8ef2640287c187e76becdc0

  • SHA1

    f2588842534a0a0c94cadaddfa02420c4d90b3ca

  • SHA256

    c9c67a26b65b124bc6e415d389cce42d603582e6c839e86446d5eae4aeea93eb

  • SHA512

    b05abd13ce7c7e4901a3def276f6c9b990aa7626ddbe2df0a1b7d847a84856e2cf8ffb3f53375900ba57a772c01631a1f5b75c31a34da3e7c2e097eb08c62e84

  • SSDEEP

    6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      c9c67a26b65b124bc6e415d389cce42d603582e6c839e86446d5eae4aeea93eb

    • Size

      383KB

    • MD5

      d42e3ba7a8ef2640287c187e76becdc0

    • SHA1

      f2588842534a0a0c94cadaddfa02420c4d90b3ca

    • SHA256

      c9c67a26b65b124bc6e415d389cce42d603582e6c839e86446d5eae4aeea93eb

    • SHA512

      b05abd13ce7c7e4901a3def276f6c9b990aa7626ddbe2df0a1b7d847a84856e2cf8ffb3f53375900ba57a772c01631a1f5b75c31a34da3e7c2e097eb08c62e84

    • SSDEEP

      6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks