General

  • Target

    f15bc4fd4a99f37b0a02dab2f5af924844a7aeecbc5fb3fe80534fef97dab44b

  • Size

    371KB

  • Sample

    241106-v2q3bsveqj

  • MD5

    23aba14b6f4ab2bab37ffc2d1651c165

  • SHA1

    2af5293d4a22d74fa1a9d5f6902fd508ae060225

  • SHA256

    f15bc4fd4a99f37b0a02dab2f5af924844a7aeecbc5fb3fe80534fef97dab44b

  • SHA512

    4e912081629d49ed5a6496d2c3e1de38e8387501b8b606ae28fbe8f99c6040de183f262ae414e24f358c5133533ec68e08918c94e73067620712cb1d1a15dc0f

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f15bc4fd4a99f37b0a02dab2f5af924844a7aeecbc5fb3fe80534fef97dab44b

    • Size

      371KB

    • MD5

      23aba14b6f4ab2bab37ffc2d1651c165

    • SHA1

      2af5293d4a22d74fa1a9d5f6902fd508ae060225

    • SHA256

      f15bc4fd4a99f37b0a02dab2f5af924844a7aeecbc5fb3fe80534fef97dab44b

    • SHA512

      4e912081629d49ed5a6496d2c3e1de38e8387501b8b606ae28fbe8f99c6040de183f262ae414e24f358c5133533ec68e08918c94e73067620712cb1d1a15dc0f

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks