General

  • Target

    429587a9e88bb450780ec2dee237c1d70196abd391a72d17baafeb1934f3ade6

  • Size

    371KB

  • Sample

    241106-ag8res1kgt

  • MD5

    2c304c805da9157e8f892306593982d5

  • SHA1

    b20675519c04bdcd7cbdb6ddc670a824498d1d3d

  • SHA256

    429587a9e88bb450780ec2dee237c1d70196abd391a72d17baafeb1934f3ade6

  • SHA512

    57b068bc3fd9a08c12108580cfbd7205550d30f7f3f62388591ab58c8090a405da1a5eed718596ff11c79a2641e39cc65fbb000c363601e77796e2ce9c4b1e7d

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      429587a9e88bb450780ec2dee237c1d70196abd391a72d17baafeb1934f3ade6

    • Size

      371KB

    • MD5

      2c304c805da9157e8f892306593982d5

    • SHA1

      b20675519c04bdcd7cbdb6ddc670a824498d1d3d

    • SHA256

      429587a9e88bb450780ec2dee237c1d70196abd391a72d17baafeb1934f3ade6

    • SHA512

      57b068bc3fd9a08c12108580cfbd7205550d30f7f3f62388591ab58c8090a405da1a5eed718596ff11c79a2641e39cc65fbb000c363601e77796e2ce9c4b1e7d

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks