General

  • Target

    fe1effaafcae53fbc740636dfead098a96bec7d65ef94aae601a9c9308be3713

  • Size

    370KB

  • Sample

    241105-yqcbksznhm

  • MD5

    4b11a535469cd8c90cd4ebcd6d199fd6

  • SHA1

    bbc48c86dab091730466d413fbfc3fc140c018b2

  • SHA256

    fe1effaafcae53fbc740636dfead098a96bec7d65ef94aae601a9c9308be3713

  • SHA512

    a9a1a65f7759530de8a40772ed9ce686056dc4738e76a8801c7239fcfbf043c7132132beb9642953238e2b956f342c5c7d18ce4eeea0d38eedf9e1c4eeb0c72f

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      fe1effaafcae53fbc740636dfead098a96bec7d65ef94aae601a9c9308be3713

    • Size

      370KB

    • MD5

      4b11a535469cd8c90cd4ebcd6d199fd6

    • SHA1

      bbc48c86dab091730466d413fbfc3fc140c018b2

    • SHA256

      fe1effaafcae53fbc740636dfead098a96bec7d65ef94aae601a9c9308be3713

    • SHA512

      a9a1a65f7759530de8a40772ed9ce686056dc4738e76a8801c7239fcfbf043c7132132beb9642953238e2b956f342c5c7d18ce4eeea0d38eedf9e1c4eeb0c72f

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks