General

  • Target

    76a736c5f52b1e9843938733a1334a617fac60a5d427507de6189d2e84239d30

  • Size

    370KB

  • Sample

    241105-r8m3gavrgn

  • MD5

    9fae3e2cb5ff1c6f848d19c4175a2856

  • SHA1

    710fe71bcf99be52362cedad7c755263797c7d26

  • SHA256

    76a736c5f52b1e9843938733a1334a617fac60a5d427507de6189d2e84239d30

  • SHA512

    ca733570a28114cead3fc7d10c63ea20f641c0112648227295a2f87cfd9375f1a35a73591e338cf624f487e1e0c9ff0e2921675cd4e521e00f7f88e296123f30

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      76a736c5f52b1e9843938733a1334a617fac60a5d427507de6189d2e84239d30

    • Size

      370KB

    • MD5

      9fae3e2cb5ff1c6f848d19c4175a2856

    • SHA1

      710fe71bcf99be52362cedad7c755263797c7d26

    • SHA256

      76a736c5f52b1e9843938733a1334a617fac60a5d427507de6189d2e84239d30

    • SHA512

      ca733570a28114cead3fc7d10c63ea20f641c0112648227295a2f87cfd9375f1a35a73591e338cf624f487e1e0c9ff0e2921675cd4e521e00f7f88e296123f30

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks