General

  • Target

    8c07b1ed9e6198673ac1c444c60c79014cc3b7721c93b2053f9dcff2adc384d6

  • Size

    423KB

  • Sample

    241106-y7tl7axgml

  • MD5

    e9de060b1de0fdefaeb5ae9a13cf7fc4

  • SHA1

    335c0e9186390026dfbebed8e11647da3dc9cfa6

  • SHA256

    8c07b1ed9e6198673ac1c444c60c79014cc3b7721c93b2053f9dcff2adc384d6

  • SHA512

    de358613d1a04c979c13ca66202d3b5603ab5cfd70db4d386f97bc08ca56e0d3dbdd1af02c4e25918e4e2807a59da4f238e0757bac3984da51ca876c48a1122b

  • SSDEEP

    6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      8c07b1ed9e6198673ac1c444c60c79014cc3b7721c93b2053f9dcff2adc384d6

    • Size

      423KB

    • MD5

      e9de060b1de0fdefaeb5ae9a13cf7fc4

    • SHA1

      335c0e9186390026dfbebed8e11647da3dc9cfa6

    • SHA256

      8c07b1ed9e6198673ac1c444c60c79014cc3b7721c93b2053f9dcff2adc384d6

    • SHA512

      de358613d1a04c979c13ca66202d3b5603ab5cfd70db4d386f97bc08ca56e0d3dbdd1af02c4e25918e4e2807a59da4f238e0757bac3984da51ca876c48a1122b

    • SSDEEP

      6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks