General

  • Target

    c69d3330cfbc6c06e2cc3f211b5773778d42188822b6bd2719e03dc3acd6acc8

  • Size

    422KB

  • Sample

    241105-szlcysvapq

  • MD5

    c315e4d9067f6e8c1a46eb483c4cfd6a

  • SHA1

    ba119894052137dfff6b21089694533cdd73f02b

  • SHA256

    c69d3330cfbc6c06e2cc3f211b5773778d42188822b6bd2719e03dc3acd6acc8

  • SHA512

    b844a78356c694e1d304954c21ab51e7fc9ae4b4ce52b6897d80008422ea553dac5798d578c9033523e00958bdbc70503b75d75832d9b573cc1fbced91d41173

  • SSDEEP

    12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      c69d3330cfbc6c06e2cc3f211b5773778d42188822b6bd2719e03dc3acd6acc8

    • Size

      422KB

    • MD5

      c315e4d9067f6e8c1a46eb483c4cfd6a

    • SHA1

      ba119894052137dfff6b21089694533cdd73f02b

    • SHA256

      c69d3330cfbc6c06e2cc3f211b5773778d42188822b6bd2719e03dc3acd6acc8

    • SHA512

      b844a78356c694e1d304954c21ab51e7fc9ae4b4ce52b6897d80008422ea553dac5798d578c9033523e00958bdbc70503b75d75832d9b573cc1fbced91d41173

    • SSDEEP

      12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks