General

  • Target

    e3ffb393ca65e664b4f1db06f084c0335b5507899dab1e4173d45db34f614a36

  • Size

    438KB

  • Sample

    241106-wdgz7avgkn

  • MD5

    781a6a3b41067a42fc75456049be38d0

  • SHA1

    ade5d320a57f208088bedfd51a3b19b31bebae43

  • SHA256

    e3ffb393ca65e664b4f1db06f084c0335b5507899dab1e4173d45db34f614a36

  • SHA512

    530cb3c2c7e312ca1ceb15edf0800df9fb5595df4dc512cd9eee91073a5770e34d53df7a33f1e0719da306877a74c9a9571b8305038871af285c3f373103f829

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      e3ffb393ca65e664b4f1db06f084c0335b5507899dab1e4173d45db34f614a36

    • Size

      438KB

    • MD5

      781a6a3b41067a42fc75456049be38d0

    • SHA1

      ade5d320a57f208088bedfd51a3b19b31bebae43

    • SHA256

      e3ffb393ca65e664b4f1db06f084c0335b5507899dab1e4173d45db34f614a36

    • SHA512

      530cb3c2c7e312ca1ceb15edf0800df9fb5595df4dc512cd9eee91073a5770e34d53df7a33f1e0719da306877a74c9a9571b8305038871af285c3f373103f829

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks