General

  • Target

    a70d8fd2e17aedc0a0b6cd5e901131a1e180a2633108fbf38c234046bff458d9

  • Size

    373KB

  • Sample

    241106-13kvlayjbz

  • MD5

    2c9b8b1f16ec2ea32a02c736b62331f7

  • SHA1

    2b7e3f256ca162cdef765bd9433d6b41740fb28b

  • SHA256

    a70d8fd2e17aedc0a0b6cd5e901131a1e180a2633108fbf38c234046bff458d9

  • SHA512

    8e3aca2bb249c936527b45bf6d0fd28dfe251d56a1a6fdd3c6dac52aad2f1db5e1cae8291b58ae11c3ae32b7f8e11135614391dfff588c15ee8beda2944dff20

  • SSDEEP

    6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a70d8fd2e17aedc0a0b6cd5e901131a1e180a2633108fbf38c234046bff458d9

    • Size

      373KB

    • MD5

      2c9b8b1f16ec2ea32a02c736b62331f7

    • SHA1

      2b7e3f256ca162cdef765bd9433d6b41740fb28b

    • SHA256

      a70d8fd2e17aedc0a0b6cd5e901131a1e180a2633108fbf38c234046bff458d9

    • SHA512

      8e3aca2bb249c936527b45bf6d0fd28dfe251d56a1a6fdd3c6dac52aad2f1db5e1cae8291b58ae11c3ae32b7f8e11135614391dfff588c15ee8beda2944dff20

    • SSDEEP

      6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks