General

  • Target

    118500feab88141dd4cac2ef1c614ed46389efcfa0e9954094ad15221094fb64

  • Size

    371KB

  • Sample

    241106-qw57va1djb

  • MD5

    04156a6a22041b668efd33da4a343531

  • SHA1

    eb278855846854ae32e6ba73337ae77239622c3e

  • SHA256

    118500feab88141dd4cac2ef1c614ed46389efcfa0e9954094ad15221094fb64

  • SHA512

    85610c0c28be0c33fd0b83ec2d60faac5ec9a13d2dd58c475895df9b2b6a433600759cab610ba979a6c75cb0301fbc2ef3c1a7945c71d72fa0713b1e36d07b0f

  • SSDEEP

    6144:OCXITG+urF+W2/cH8J6yr/bAxgPLrk1sx5b7ITsqXigaXwVfZ:OCXITDDWmx6BOj8O17R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      118500feab88141dd4cac2ef1c614ed46389efcfa0e9954094ad15221094fb64

    • Size

      371KB

    • MD5

      04156a6a22041b668efd33da4a343531

    • SHA1

      eb278855846854ae32e6ba73337ae77239622c3e

    • SHA256

      118500feab88141dd4cac2ef1c614ed46389efcfa0e9954094ad15221094fb64

    • SHA512

      85610c0c28be0c33fd0b83ec2d60faac5ec9a13d2dd58c475895df9b2b6a433600759cab610ba979a6c75cb0301fbc2ef3c1a7945c71d72fa0713b1e36d07b0f

    • SSDEEP

      6144:OCXITG+urF+W2/cH8J6yr/bAxgPLrk1sx5b7ITsqXigaXwVfZ:OCXITDDWmx6BOj8O17R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks