General

  • Target

    36c572926a614e2eb3cd8f91aac32566aa4399169b18024431865a1c6db2910e

  • Size

    371KB

  • Sample

    241106-wf796axkdr

  • MD5

    826571b435e93152af31915b48d0e4be

  • SHA1

    ceb25840479d8b8d3aa6aba5182340cfff65f181

  • SHA256

    36c572926a614e2eb3cd8f91aac32566aa4399169b18024431865a1c6db2910e

  • SHA512

    1a7848aadab1070010e103383997e6934540a554621007b54ed57dfbd1ebd84f0565adab7d6ab1968d8b74242d42e6a10a76ac425f4d35336dc6d288c2f2e402

  • SSDEEP

    6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      36c572926a614e2eb3cd8f91aac32566aa4399169b18024431865a1c6db2910e

    • Size

      371KB

    • MD5

      826571b435e93152af31915b48d0e4be

    • SHA1

      ceb25840479d8b8d3aa6aba5182340cfff65f181

    • SHA256

      36c572926a614e2eb3cd8f91aac32566aa4399169b18024431865a1c6db2910e

    • SHA512

      1a7848aadab1070010e103383997e6934540a554621007b54ed57dfbd1ebd84f0565adab7d6ab1968d8b74242d42e6a10a76ac425f4d35336dc6d288c2f2e402

    • SSDEEP

      6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks