General

  • Target

    02a276f2bb92f891f5c5724cc3b08fe7e2d985f4f55036997cd71acc0f77692a

  • Size

    423KB

  • Sample

    241106-r211rasfjj

  • MD5

    3754950583ad4cddb0ad70ee2cc8601a

  • SHA1

    e69eb8cd71ed5374bb3ecdc7d0110c7bd69311ed

  • SHA256

    02a276f2bb92f891f5c5724cc3b08fe7e2d985f4f55036997cd71acc0f77692a

  • SHA512

    f0991bbf720cf5fea50d80d24f0c67323d21b544cbe78a0a0872212430eb7dfd8b66d595887fd5ac9b94163ee770436191031c8d2212a0eebdcdfc6fb0d4b05e

  • SSDEEP

    6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      02a276f2bb92f891f5c5724cc3b08fe7e2d985f4f55036997cd71acc0f77692a

    • Size

      423KB

    • MD5

      3754950583ad4cddb0ad70ee2cc8601a

    • SHA1

      e69eb8cd71ed5374bb3ecdc7d0110c7bd69311ed

    • SHA256

      02a276f2bb92f891f5c5724cc3b08fe7e2d985f4f55036997cd71acc0f77692a

    • SHA512

      f0991bbf720cf5fea50d80d24f0c67323d21b544cbe78a0a0872212430eb7dfd8b66d595887fd5ac9b94163ee770436191031c8d2212a0eebdcdfc6fb0d4b05e

    • SSDEEP

      6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks