General

  • Target

    79185ad8213bfc3eb937834527080c3064652d1a2386a859184ddb45ed178581

  • Size

    371KB

  • Sample

    241106-krcf3sxcka

  • MD5

    2273c320c451a66a2a068d0f3f528a74

  • SHA1

    e9588b0c0943843312d9f2714cf7647157a8938c

  • SHA256

    79185ad8213bfc3eb937834527080c3064652d1a2386a859184ddb45ed178581

  • SHA512

    b5528837d0ff97eabc42cf3932d27647454917b525250fd2bc53a48d56a44868ef82c0ca80ec5f242b7b1c91382189c312b49693b392f77829018d639beede71

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      79185ad8213bfc3eb937834527080c3064652d1a2386a859184ddb45ed178581

    • Size

      371KB

    • MD5

      2273c320c451a66a2a068d0f3f528a74

    • SHA1

      e9588b0c0943843312d9f2714cf7647157a8938c

    • SHA256

      79185ad8213bfc3eb937834527080c3064652d1a2386a859184ddb45ed178581

    • SHA512

      b5528837d0ff97eabc42cf3932d27647454917b525250fd2bc53a48d56a44868ef82c0ca80ec5f242b7b1c91382189c312b49693b392f77829018d639beede71

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks