General

  • Target

    2fc3282506e791197c3d9483f643efcc8547d1df3b51830f6d6beea2e094fdeb

  • Size

    298KB

  • Sample

    241106-kfhhysyqfk

  • MD5

    3e59c738aaa68f040915e5d90c319c4c

  • SHA1

    6ee28351c32d2c3490e267a80d6aba60faefb64c

  • SHA256

    2fc3282506e791197c3d9483f643efcc8547d1df3b51830f6d6beea2e094fdeb

  • SHA512

    8e0ea77e9e63b487982f41e8b805fe88cf4ff47537e23dc5054f04f12d16b96d164773a1fdfc49cd07018297a584be10317f707af97c87c75dbec46b06854fad

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2fc3282506e791197c3d9483f643efcc8547d1df3b51830f6d6beea2e094fdeb

    • Size

      298KB

    • MD5

      3e59c738aaa68f040915e5d90c319c4c

    • SHA1

      6ee28351c32d2c3490e267a80d6aba60faefb64c

    • SHA256

      2fc3282506e791197c3d9483f643efcc8547d1df3b51830f6d6beea2e094fdeb

    • SHA512

      8e0ea77e9e63b487982f41e8b805fe88cf4ff47537e23dc5054f04f12d16b96d164773a1fdfc49cd07018297a584be10317f707af97c87c75dbec46b06854fad

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks