General

  • Target

    9a971345fa903c20d9c5fd409ddcb2c5017f7e61f9936b613cc0e81ab333e4b1

  • Size

    297KB

  • Sample

    241105-wqz2jaylcn

  • MD5

    f8356b3482cfd0aebcbf8b337f4a1e16

  • SHA1

    b0786322a27d4976720268a2c5e7c6cc48871e1c

  • SHA256

    9a971345fa903c20d9c5fd409ddcb2c5017f7e61f9936b613cc0e81ab333e4b1

  • SHA512

    06ed0d2bc26b1d7a889d336577eaef1b8f64dae1414c13f080311f21461f5eef1a0f6b0443721ef5adc6c79711b926283eea511e5c86007d9a0fdaf9cab7cdfb

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      9a971345fa903c20d9c5fd409ddcb2c5017f7e61f9936b613cc0e81ab333e4b1

    • Size

      297KB

    • MD5

      f8356b3482cfd0aebcbf8b337f4a1e16

    • SHA1

      b0786322a27d4976720268a2c5e7c6cc48871e1c

    • SHA256

      9a971345fa903c20d9c5fd409ddcb2c5017f7e61f9936b613cc0e81ab333e4b1

    • SHA512

      06ed0d2bc26b1d7a889d336577eaef1b8f64dae1414c13f080311f21461f5eef1a0f6b0443721ef5adc6c79711b926283eea511e5c86007d9a0fdaf9cab7cdfb

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks