General

  • Target

    a94120e2bb60f63681f44205436a45cf011a5a7c3a8dc21a8c70cb931cda0f10

  • Size

    297KB

  • Sample

    241106-pyx4kszjfw

  • MD5

    893d7d283f0b7dc9e7285eb135e99d41

  • SHA1

    79317d3c52dc1449a10bf377bab4226b5e37abc0

  • SHA256

    a94120e2bb60f63681f44205436a45cf011a5a7c3a8dc21a8c70cb931cda0f10

  • SHA512

    3cfe8d1d4cbf3221d0ac2d4be4976c89568972d5f501b723286c676e1cbad472a78511dbc3c121047c2563bbe148510dfff46206904f52c9479790404f6dd392

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a94120e2bb60f63681f44205436a45cf011a5a7c3a8dc21a8c70cb931cda0f10

    • Size

      297KB

    • MD5

      893d7d283f0b7dc9e7285eb135e99d41

    • SHA1

      79317d3c52dc1449a10bf377bab4226b5e37abc0

    • SHA256

      a94120e2bb60f63681f44205436a45cf011a5a7c3a8dc21a8c70cb931cda0f10

    • SHA512

      3cfe8d1d4cbf3221d0ac2d4be4976c89568972d5f501b723286c676e1cbad472a78511dbc3c121047c2563bbe148510dfff46206904f52c9479790404f6dd392

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks