General

  • Target

    1ab0846d5711bddc6dde1ddd4a7428f72c3253b0c65f4d6fabffc1813e0c2291

  • Size

    423KB

  • Sample

    241105-wkpcvawale

  • MD5

    8b81cebbee7b6c8b1eae66173b53e1bd

  • SHA1

    3086b3a94eacb17f139714398e77a593b449b088

  • SHA256

    1ab0846d5711bddc6dde1ddd4a7428f72c3253b0c65f4d6fabffc1813e0c2291

  • SHA512

    5bfa15dc09da30d667f26970ab7c2b87ef0aacb068616980f7649a62c389f50bca6723ed73226041497f94103d521be9be682e5f6e065532ab8a3c0f2bdbe315

  • SSDEEP

    6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      1ab0846d5711bddc6dde1ddd4a7428f72c3253b0c65f4d6fabffc1813e0c2291

    • Size

      423KB

    • MD5

      8b81cebbee7b6c8b1eae66173b53e1bd

    • SHA1

      3086b3a94eacb17f139714398e77a593b449b088

    • SHA256

      1ab0846d5711bddc6dde1ddd4a7428f72c3253b0c65f4d6fabffc1813e0c2291

    • SHA512

      5bfa15dc09da30d667f26970ab7c2b87ef0aacb068616980f7649a62c389f50bca6723ed73226041497f94103d521be9be682e5f6e065532ab8a3c0f2bdbe315

    • SSDEEP

      6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks