General

  • Target

    ffbd86ea48582dc94131c62e198db3e16309e3465ae6fc4f4a5a02654c4f7c15

  • Size

    297KB

  • Sample

    241106-pfz58ayqct

  • MD5

    448d326800d2141dbdb2c0b0fad93de0

  • SHA1

    5540dce693cb7d83cd465cca921bce0d952c8693

  • SHA256

    ffbd86ea48582dc94131c62e198db3e16309e3465ae6fc4f4a5a02654c4f7c15

  • SHA512

    f50efccc56aff4eb54c2a2e1b9ce17758aa9c7ed6101e75d2f8cd7e785ae8dae9364e2881fc23b7a5451eedc1c007a09b3ff0ea68c534d23127dd312105341fb

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      ffbd86ea48582dc94131c62e198db3e16309e3465ae6fc4f4a5a02654c4f7c15

    • Size

      297KB

    • MD5

      448d326800d2141dbdb2c0b0fad93de0

    • SHA1

      5540dce693cb7d83cd465cca921bce0d952c8693

    • SHA256

      ffbd86ea48582dc94131c62e198db3e16309e3465ae6fc4f4a5a02654c4f7c15

    • SHA512

      f50efccc56aff4eb54c2a2e1b9ce17758aa9c7ed6101e75d2f8cd7e785ae8dae9364e2881fc23b7a5451eedc1c007a09b3ff0ea68c534d23127dd312105341fb

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks