General

  • Target

    66e15655f8407c9d71aac7a7b59ce3baf4fb48eeb132da59c6a6fa48235f8a35

  • Size

    422KB

  • Sample

    241106-1hf1xaybqf

  • MD5

    e39c0dba5c63187e058c7e2abd8adc0f

  • SHA1

    66def0f530314c58a83ca055b8e4f3833f36a1de

  • SHA256

    66e15655f8407c9d71aac7a7b59ce3baf4fb48eeb132da59c6a6fa48235f8a35

  • SHA512

    768eadd64aa2b9627d683ae55dd1b1dc8faec308c2013be30a4a3dd3f15593cc5eeaeb49be14f335b3050fed612f029c0a0aad762846e7dd6097237855bac6cd

  • SSDEEP

    12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      66e15655f8407c9d71aac7a7b59ce3baf4fb48eeb132da59c6a6fa48235f8a35

    • Size

      422KB

    • MD5

      e39c0dba5c63187e058c7e2abd8adc0f

    • SHA1

      66def0f530314c58a83ca055b8e4f3833f36a1de

    • SHA256

      66e15655f8407c9d71aac7a7b59ce3baf4fb48eeb132da59c6a6fa48235f8a35

    • SHA512

      768eadd64aa2b9627d683ae55dd1b1dc8faec308c2013be30a4a3dd3f15593cc5eeaeb49be14f335b3050fed612f029c0a0aad762846e7dd6097237855bac6cd

    • SSDEEP

      12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks