General

  • Target

    f821c18163d7cac3fe4d2f1a716639b8e021c3f9cfc120ac14f9c510e73a52a1

  • Size

    297KB

  • Sample

    241106-wq9wqswajk

  • MD5

    2db14f7a55f71be114ed2767b64b1976

  • SHA1

    b7dbc0791abdf7dd1e5295f75a2551a8bbc386aa

  • SHA256

    f821c18163d7cac3fe4d2f1a716639b8e021c3f9cfc120ac14f9c510e73a52a1

  • SHA512

    c11a8581e59a9e7cf250ceb0ea88101085f400efd4f6dbdbb797b91c6598c67cfcb8ec0e2882268b5eeb780dc8633d9818e2a6e289ae8042446b97c5504125c3

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f821c18163d7cac3fe4d2f1a716639b8e021c3f9cfc120ac14f9c510e73a52a1

    • Size

      297KB

    • MD5

      2db14f7a55f71be114ed2767b64b1976

    • SHA1

      b7dbc0791abdf7dd1e5295f75a2551a8bbc386aa

    • SHA256

      f821c18163d7cac3fe4d2f1a716639b8e021c3f9cfc120ac14f9c510e73a52a1

    • SHA512

      c11a8581e59a9e7cf250ceb0ea88101085f400efd4f6dbdbb797b91c6598c67cfcb8ec0e2882268b5eeb780dc8633d9818e2a6e289ae8042446b97c5504125c3

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks