General

  • Target

    531c283cf50b213646cd4cda4e5b4e8546737b5449c15b6c0b6b68277d1c7221

  • Size

    371KB

  • Sample

    241105-snmrmsspfw

  • MD5

    03556045c282fa7f456b0cc30c68aea8

  • SHA1

    6b571d52942717e352b9b6c49f5401de7088d792

  • SHA256

    531c283cf50b213646cd4cda4e5b4e8546737b5449c15b6c0b6b68277d1c7221

  • SHA512

    b0092baa763f7f47edf9a485d85f03bd84c2087241f05fb3ed75a9fe7a2689943a0a71627dfb84ff8ebcd189ef7e17a5840945e7464b964b0d9ae02214dda87c

  • SSDEEP

    6144:K5T6cP+DC7WJrK3tg4LobitExnGRZyodb7ITsqXigaXwVfh:K5T6cEKWJMW7GR5h7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      531c283cf50b213646cd4cda4e5b4e8546737b5449c15b6c0b6b68277d1c7221

    • Size

      371KB

    • MD5

      03556045c282fa7f456b0cc30c68aea8

    • SHA1

      6b571d52942717e352b9b6c49f5401de7088d792

    • SHA256

      531c283cf50b213646cd4cda4e5b4e8546737b5449c15b6c0b6b68277d1c7221

    • SHA512

      b0092baa763f7f47edf9a485d85f03bd84c2087241f05fb3ed75a9fe7a2689943a0a71627dfb84ff8ebcd189ef7e17a5840945e7464b964b0d9ae02214dda87c

    • SSDEEP

      6144:K5T6cP+DC7WJrK3tg4LobitExnGRZyodb7ITsqXigaXwVfh:K5T6cEKWJMW7GR5h7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks