General

  • Target

    2e683e43a100300dced8e2822292361a333cc160e6b94bcb2d293f95d135751e

  • Size

    427KB

  • Sample

    241107-c44gbswkhm

  • MD5

    7aa9d87548bdc407e54e01e177901b5c

  • SHA1

    8694b0dc1f8c6a43b9e46963d1c4d45b6d176b1e

  • SHA256

    2e683e43a100300dced8e2822292361a333cc160e6b94bcb2d293f95d135751e

  • SHA512

    50253a36f09880c764c8799e9552ecda3972ec3d31cba8de2e01ae973afb52b3b0640b7a6558245d9c123231ae4ac137fda88c3a9028ce6df6e2567315e3728f

  • SSDEEP

    6144:XxnVbTjtyULhQVfiYUbqBAXdfWe22Yi5/L/ngOBWJfr1PqaRJ0:XxVbsgcinqBAXNT22Yi5/L/n6r1Pq

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2e683e43a100300dced8e2822292361a333cc160e6b94bcb2d293f95d135751e

    • Size

      427KB

    • MD5

      7aa9d87548bdc407e54e01e177901b5c

    • SHA1

      8694b0dc1f8c6a43b9e46963d1c4d45b6d176b1e

    • SHA256

      2e683e43a100300dced8e2822292361a333cc160e6b94bcb2d293f95d135751e

    • SHA512

      50253a36f09880c764c8799e9552ecda3972ec3d31cba8de2e01ae973afb52b3b0640b7a6558245d9c123231ae4ac137fda88c3a9028ce6df6e2567315e3728f

    • SSDEEP

      6144:XxnVbTjtyULhQVfiYUbqBAXdfWe22Yi5/L/ngOBWJfr1PqaRJ0:XxVbsgcinqBAXNT22Yi5/L/n6r1Pq

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks