General

  • Target

    afcf1156edce9dc9f74dfab016ec3347e5edbca39706bc61ad764b422d88f176

  • Size

    371KB

  • Sample

    241105-txwatavfmk

  • MD5

    94da30bfca7ca8cf8eedb1e7c2995343

  • SHA1

    1cc33b71b14a977c5ceb7ad73d98943078d5d826

  • SHA256

    afcf1156edce9dc9f74dfab016ec3347e5edbca39706bc61ad764b422d88f176

  • SHA512

    6b6c2757fc410071b89f34ae12b842f7126de00b486712acfc756434d2e11f64ed2b3df942eebb45db7bfe0b82dc4b14693f09e708b43b43f2bb0e76bc3b632d

  • SSDEEP

    6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      afcf1156edce9dc9f74dfab016ec3347e5edbca39706bc61ad764b422d88f176

    • Size

      371KB

    • MD5

      94da30bfca7ca8cf8eedb1e7c2995343

    • SHA1

      1cc33b71b14a977c5ceb7ad73d98943078d5d826

    • SHA256

      afcf1156edce9dc9f74dfab016ec3347e5edbca39706bc61ad764b422d88f176

    • SHA512

      6b6c2757fc410071b89f34ae12b842f7126de00b486712acfc756434d2e11f64ed2b3df942eebb45db7bfe0b82dc4b14693f09e708b43b43f2bb0e76bc3b632d

    • SSDEEP

      6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks