General

  • Target

    37fa2a281dcb1c33abe1d09b8258f4f8745a0e429dd91b7e6a49c8f2daf9ddd1

  • Size

    438KB

  • Sample

    241106-yevc1swfpd

  • MD5

    9a00750c1f1832cff86b5b8e2c0cbe43

  • SHA1

    d69e5f7e1cd42be965c47f3046af376d355993e5

  • SHA256

    37fa2a281dcb1c33abe1d09b8258f4f8745a0e429dd91b7e6a49c8f2daf9ddd1

  • SHA512

    efa8afb648412e78c269a0a3565c37af65e701cc66589121f70042a25b7043cee92cfcc26f845f5c6494c8a2fc8259ed143fa100fe49b83e25ca68a76096e1f3

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      37fa2a281dcb1c33abe1d09b8258f4f8745a0e429dd91b7e6a49c8f2daf9ddd1

    • Size

      438KB

    • MD5

      9a00750c1f1832cff86b5b8e2c0cbe43

    • SHA1

      d69e5f7e1cd42be965c47f3046af376d355993e5

    • SHA256

      37fa2a281dcb1c33abe1d09b8258f4f8745a0e429dd91b7e6a49c8f2daf9ddd1

    • SHA512

      efa8afb648412e78c269a0a3565c37af65e701cc66589121f70042a25b7043cee92cfcc26f845f5c6494c8a2fc8259ed143fa100fe49b83e25ca68a76096e1f3

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks