General

  • Target

    7e21b321ab7e28c29c2a1e67ebf1367a69ac9143555482eb1dc3eb306b1cb56d

  • Size

    297KB

  • Sample

    241106-k7gqqsyajp

  • MD5

    bdf661f935860a4b557d6cb477ab5824

  • SHA1

    4987381c0d212209aeb1b1f4cb2528c532511028

  • SHA256

    7e21b321ab7e28c29c2a1e67ebf1367a69ac9143555482eb1dc3eb306b1cb56d

  • SHA512

    44ba16e46cfc88c902acb1ddb7cdab15ecbd18bb33c3e637fbabe7fcaa5516c63a410c26f622902e3d0d1f77f4e18b3e3da0c5555fbe9274346fe661fec1a036

  • SSDEEP

    6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7e21b321ab7e28c29c2a1e67ebf1367a69ac9143555482eb1dc3eb306b1cb56d

    • Size

      297KB

    • MD5

      bdf661f935860a4b557d6cb477ab5824

    • SHA1

      4987381c0d212209aeb1b1f4cb2528c532511028

    • SHA256

      7e21b321ab7e28c29c2a1e67ebf1367a69ac9143555482eb1dc3eb306b1cb56d

    • SHA512

      44ba16e46cfc88c902acb1ddb7cdab15ecbd18bb33c3e637fbabe7fcaa5516c63a410c26f622902e3d0d1f77f4e18b3e3da0c5555fbe9274346fe661fec1a036

    • SSDEEP

      6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks