General

  • Target

    f9389362fd7cf7b4bed8e0ce47bc504505b32a51b425b8a2c77ca096d2481f28

  • Size

    423KB

  • Sample

    241106-ptw1qa1blm

  • MD5

    270c1c3f265f8bf96c6e34d30ba7e3fa

  • SHA1

    c9dc50fb07acb28330f19656848251b4eb3daac5

  • SHA256

    f9389362fd7cf7b4bed8e0ce47bc504505b32a51b425b8a2c77ca096d2481f28

  • SHA512

    2d319630900625d9ec08252440fdc94eeeedeb198f21ba1320cdf0db2f2de47a165518ff2a4dc9a924e80d53c5efe71f5dff028311773ce44bc7d32a7ee36048

  • SSDEEP

    6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f9389362fd7cf7b4bed8e0ce47bc504505b32a51b425b8a2c77ca096d2481f28

    • Size

      423KB

    • MD5

      270c1c3f265f8bf96c6e34d30ba7e3fa

    • SHA1

      c9dc50fb07acb28330f19656848251b4eb3daac5

    • SHA256

      f9389362fd7cf7b4bed8e0ce47bc504505b32a51b425b8a2c77ca096d2481f28

    • SHA512

      2d319630900625d9ec08252440fdc94eeeedeb198f21ba1320cdf0db2f2de47a165518ff2a4dc9a924e80d53c5efe71f5dff028311773ce44bc7d32a7ee36048

    • SSDEEP

      6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks