General

  • Target

    97e1294e09a32bb726a46e1bab60ca5ad9f60c116faf1724a137f469380a8ab7

  • Size

    298KB

  • Sample

    241106-trg61asndt

  • MD5

    14123fd164af21bb169caf6cae000968

  • SHA1

    242d047c880c1ca5834a69a03c1ecd0e2b5d5590

  • SHA256

    97e1294e09a32bb726a46e1bab60ca5ad9f60c116faf1724a137f469380a8ab7

  • SHA512

    6eee630749940912e4f4c5d966f1db1af95ff9bb36ba8bb8184b893c6f9f3f63add01b2c7ca1c21602492b2912894de886a638ae2bc221285c8e3e2645ec3d60

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      97e1294e09a32bb726a46e1bab60ca5ad9f60c116faf1724a137f469380a8ab7

    • Size

      298KB

    • MD5

      14123fd164af21bb169caf6cae000968

    • SHA1

      242d047c880c1ca5834a69a03c1ecd0e2b5d5590

    • SHA256

      97e1294e09a32bb726a46e1bab60ca5ad9f60c116faf1724a137f469380a8ab7

    • SHA512

      6eee630749940912e4f4c5d966f1db1af95ff9bb36ba8bb8184b893c6f9f3f63add01b2c7ca1c21602492b2912894de886a638ae2bc221285c8e3e2645ec3d60

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks