General

  • Target

    c73e708d4b16206c9f6e8cde6541e65b2ebadca8f83bf8dfe2e0594827a168dc

  • Size

    423KB

  • Sample

    241106-2rzp2szbqe

  • MD5

    de9cfbba90a94a5d7edea8ddb075df12

  • SHA1

    a093b819486242aea6dd47d8535f7e87e338c5c9

  • SHA256

    c73e708d4b16206c9f6e8cde6541e65b2ebadca8f83bf8dfe2e0594827a168dc

  • SHA512

    9ef9392468ce395355a43da149b503a44ce2a9585b216b00ca84c05aa65da6d00e3506ed71c39152b2c237ffe44881cd12cf34542d49f4b1c68962ac437c76ae

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      c73e708d4b16206c9f6e8cde6541e65b2ebadca8f83bf8dfe2e0594827a168dc

    • Size

      423KB

    • MD5

      de9cfbba90a94a5d7edea8ddb075df12

    • SHA1

      a093b819486242aea6dd47d8535f7e87e338c5c9

    • SHA256

      c73e708d4b16206c9f6e8cde6541e65b2ebadca8f83bf8dfe2e0594827a168dc

    • SHA512

      9ef9392468ce395355a43da149b503a44ce2a9585b216b00ca84c05aa65da6d00e3506ed71c39152b2c237ffe44881cd12cf34542d49f4b1c68962ac437c76ae

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks