General

  • Target

    06a2cd96269dd6b94a0551c1174e11504d72c80e52c55ddf2a2327bd8689542f

  • Size

    370KB

  • Sample

    241106-2vzt8azcpc

  • MD5

    9d49e806514ef6fb08ee8c8cbc9f37ad

  • SHA1

    fc81357672ea68f19a39e10d50cb7dc8c91e994d

  • SHA256

    06a2cd96269dd6b94a0551c1174e11504d72c80e52c55ddf2a2327bd8689542f

  • SHA512

    aa68d997e988e7f0d03e919186fec435166e2c5ebb457e38909163d08f7810c22c61387ee8d8cb902cb20a0bb3cffe06d8ae2d20d47bd8407382a950517f6481

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      06a2cd96269dd6b94a0551c1174e11504d72c80e52c55ddf2a2327bd8689542f

    • Size

      370KB

    • MD5

      9d49e806514ef6fb08ee8c8cbc9f37ad

    • SHA1

      fc81357672ea68f19a39e10d50cb7dc8c91e994d

    • SHA256

      06a2cd96269dd6b94a0551c1174e11504d72c80e52c55ddf2a2327bd8689542f

    • SHA512

      aa68d997e988e7f0d03e919186fec435166e2c5ebb457e38909163d08f7810c22c61387ee8d8cb902cb20a0bb3cffe06d8ae2d20d47bd8407382a950517f6481

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks