General

  • Target

    e9b757e58eaddbf03b30fc69a839c6de80eeeaddadd1e71d563717ec37328482

  • Size

    297KB

  • Sample

    241106-vx7jhstldw

  • MD5

    26dc8635275a88563a8122cafc9ad7d8

  • SHA1

    f0a06c7b975800817b155c66571a3cf406367c74

  • SHA256

    e9b757e58eaddbf03b30fc69a839c6de80eeeaddadd1e71d563717ec37328482

  • SHA512

    9bd6e52f9ee182f76c29900eba222a914ace73cf35c53af59c77788197fb13976d11f2dba8b72116048ddda8e68f8f0f828ba804ac76e7da8f9917d230e1855b

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      e9b757e58eaddbf03b30fc69a839c6de80eeeaddadd1e71d563717ec37328482

    • Size

      297KB

    • MD5

      26dc8635275a88563a8122cafc9ad7d8

    • SHA1

      f0a06c7b975800817b155c66571a3cf406367c74

    • SHA256

      e9b757e58eaddbf03b30fc69a839c6de80eeeaddadd1e71d563717ec37328482

    • SHA512

      9bd6e52f9ee182f76c29900eba222a914ace73cf35c53af59c77788197fb13976d11f2dba8b72116048ddda8e68f8f0f828ba804ac76e7da8f9917d230e1855b

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks