General

  • Target

    1dc81608dd27a083a6094bc67050666c2e9223ad6f2936f82633176fecee8eab

  • Size

    297KB

  • Sample

    241106-w1yapavfnh

  • MD5

    c94f0a97c0e25aa3cb03aac84fa22686

  • SHA1

    008b77df5c1affd70b4407da0b731f02815b0c06

  • SHA256

    1dc81608dd27a083a6094bc67050666c2e9223ad6f2936f82633176fecee8eab

  • SHA512

    42c5b318f75a550aa74a8b66dfe0e0b7406eda48bcafd315ee63aaa0129d2c6573a18bb942eb09b67f6dacdcbc08f524793fa3fcff1081e93483a2c07340df53

  • SSDEEP

    6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      1dc81608dd27a083a6094bc67050666c2e9223ad6f2936f82633176fecee8eab

    • Size

      297KB

    • MD5

      c94f0a97c0e25aa3cb03aac84fa22686

    • SHA1

      008b77df5c1affd70b4407da0b731f02815b0c06

    • SHA256

      1dc81608dd27a083a6094bc67050666c2e9223ad6f2936f82633176fecee8eab

    • SHA512

      42c5b318f75a550aa74a8b66dfe0e0b7406eda48bcafd315ee63aaa0129d2c6573a18bb942eb09b67f6dacdcbc08f524793fa3fcff1081e93483a2c07340df53

    • SSDEEP

      6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks