General

  • Target

    7485026e2e6a1db7408ca91814186cabaca6b8d25c3a5c8370b7252635b3e031

  • Size

    346KB

  • Sample

    241106-2shg6azcjc

  • MD5

    79e377c965890c5898ff6a1ed915bde2

  • SHA1

    219d560cd256aa7b76fe09bc439ae815e14a13ef

  • SHA256

    7485026e2e6a1db7408ca91814186cabaca6b8d25c3a5c8370b7252635b3e031

  • SHA512

    e867baaf45eaee7bce52d83761fb694e56663bcc78da71e49a8862c583636411b6c189d9426dd02bd852c3463933b621eabdfc326bf32240183c5648e67945da

  • SSDEEP

    6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7485026e2e6a1db7408ca91814186cabaca6b8d25c3a5c8370b7252635b3e031

    • Size

      346KB

    • MD5

      79e377c965890c5898ff6a1ed915bde2

    • SHA1

      219d560cd256aa7b76fe09bc439ae815e14a13ef

    • SHA256

      7485026e2e6a1db7408ca91814186cabaca6b8d25c3a5c8370b7252635b3e031

    • SHA512

      e867baaf45eaee7bce52d83761fb694e56663bcc78da71e49a8862c583636411b6c189d9426dd02bd852c3463933b621eabdfc326bf32240183c5648e67945da

    • SSDEEP

      6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks