General

  • Target

    179cf74b3b6db84dc3d52f51c7e39f03d2bfde14a8ea5b1eac19bcbd1ad770bf

  • Size

    298KB

  • Sample

    241105-v155vsxqcr

  • MD5

    7cea355b2c132047cfd0d4bc5eb03443

  • SHA1

    0eb37d8b0c57e283a811881c556b93e6669fc6cb

  • SHA256

    179cf74b3b6db84dc3d52f51c7e39f03d2bfde14a8ea5b1eac19bcbd1ad770bf

  • SHA512

    d51b93b59446d5c245dc25b1c640267232417a95b1c077ef77e32da13bb8a1328e41ba3d6f39108e792a8ef3a32e4bd9e3de3f36ea96ff5b7f271ddb47958f7f

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      179cf74b3b6db84dc3d52f51c7e39f03d2bfde14a8ea5b1eac19bcbd1ad770bf

    • Size

      298KB

    • MD5

      7cea355b2c132047cfd0d4bc5eb03443

    • SHA1

      0eb37d8b0c57e283a811881c556b93e6669fc6cb

    • SHA256

      179cf74b3b6db84dc3d52f51c7e39f03d2bfde14a8ea5b1eac19bcbd1ad770bf

    • SHA512

      d51b93b59446d5c245dc25b1c640267232417a95b1c077ef77e32da13bb8a1328e41ba3d6f39108e792a8ef3a32e4bd9e3de3f36ea96ff5b7f271ddb47958f7f

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks