General

  • Target

    ed3fbfaa1a0f052a9f94e137c86e470c26d99f03faaa65124872231186636a18

  • Size

    422KB

  • Sample

    241106-zymmyszngq

  • MD5

    29d681d0c9006302e9b8c3f5ae771f4b

  • SHA1

    bc9655bd4892480968ddcada56734de9c21b4706

  • SHA256

    ed3fbfaa1a0f052a9f94e137c86e470c26d99f03faaa65124872231186636a18

  • SHA512

    6348c3105f9bb8a115e5c9db8caebd5e541305f46eae8f4302501c7eadc270da9813ed8c1761074811394acf5be1adde88efd3baac0d036a844d44215bb1e653

  • SSDEEP

    12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      ed3fbfaa1a0f052a9f94e137c86e470c26d99f03faaa65124872231186636a18

    • Size

      422KB

    • MD5

      29d681d0c9006302e9b8c3f5ae771f4b

    • SHA1

      bc9655bd4892480968ddcada56734de9c21b4706

    • SHA256

      ed3fbfaa1a0f052a9f94e137c86e470c26d99f03faaa65124872231186636a18

    • SHA512

      6348c3105f9bb8a115e5c9db8caebd5e541305f46eae8f4302501c7eadc270da9813ed8c1761074811394acf5be1adde88efd3baac0d036a844d44215bb1e653

    • SSDEEP

      12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks