General

  • Target

    df4cf232df62c828cf65d97bc6260fad7b9d28e77578617a3569314620378d63

  • Size

    383KB

  • Sample

    241105-ynb8ssxcqg

  • MD5

    7e0e29e886ca95903f68490c9b248e13

  • SHA1

    42a69adafd310cfe0cb3fb13745b4ee66abcd113

  • SHA256

    df4cf232df62c828cf65d97bc6260fad7b9d28e77578617a3569314620378d63

  • SHA512

    7c6a334caf8bc11472fb159743877dd8058bd472e8b1ab6d41f4eef9d701ec6e8897be0ac6cc729277c4e1a73770f97c3f726aab84226d0fff710c15eb5630b6

  • SSDEEP

    6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      df4cf232df62c828cf65d97bc6260fad7b9d28e77578617a3569314620378d63

    • Size

      383KB

    • MD5

      7e0e29e886ca95903f68490c9b248e13

    • SHA1

      42a69adafd310cfe0cb3fb13745b4ee66abcd113

    • SHA256

      df4cf232df62c828cf65d97bc6260fad7b9d28e77578617a3569314620378d63

    • SHA512

      7c6a334caf8bc11472fb159743877dd8058bd472e8b1ab6d41f4eef9d701ec6e8897be0ac6cc729277c4e1a73770f97c3f726aab84226d0fff710c15eb5630b6

    • SSDEEP

      6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks