General

  • Target

    a90f460af695faa2ac57a9057ef09f0aee8efd7602e62305a1b3413490cd2b40

  • Size

    438KB

  • Sample

    241106-j5798swgqb

  • MD5

    6c16bbed7d844ab89c8123585a51cefd

  • SHA1

    d708599a94007443ac6fc8def10a0d947850607b

  • SHA256

    a90f460af695faa2ac57a9057ef09f0aee8efd7602e62305a1b3413490cd2b40

  • SHA512

    e4c5097b3a1372f4bdcaf707469b990c605e92f2c06a505a313fc5923d51a5bf7f7784ec6d0e24f1204945201dd59fe7084347b98c729b0b9e2dfdab82b13049

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a90f460af695faa2ac57a9057ef09f0aee8efd7602e62305a1b3413490cd2b40

    • Size

      438KB

    • MD5

      6c16bbed7d844ab89c8123585a51cefd

    • SHA1

      d708599a94007443ac6fc8def10a0d947850607b

    • SHA256

      a90f460af695faa2ac57a9057ef09f0aee8efd7602e62305a1b3413490cd2b40

    • SHA512

      e4c5097b3a1372f4bdcaf707469b990c605e92f2c06a505a313fc5923d51a5bf7f7784ec6d0e24f1204945201dd59fe7084347b98c729b0b9e2dfdab82b13049

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks