General

  • Target

    3476ec90446319bc219e9c21a2672cd47f269a0d18e906778a781c802cc53503

  • Size

    438KB

  • Sample

    241107-cxa67sslg1

  • MD5

    2c924c6070d5e330e149074b80070678

  • SHA1

    bea6b48f01c96080d34bf2a5706249400b7ce628

  • SHA256

    3476ec90446319bc219e9c21a2672cd47f269a0d18e906778a781c802cc53503

  • SHA512

    1ae90d308ff816bfcb4c20d6e7705d17e71400c4b7b1c90dd6ec8948217d8b57f83dfc2d61f0373a49fc6e41dba8bd044714b7988cfcf85d1bb2e213df01b2e8

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      3476ec90446319bc219e9c21a2672cd47f269a0d18e906778a781c802cc53503

    • Size

      438KB

    • MD5

      2c924c6070d5e330e149074b80070678

    • SHA1

      bea6b48f01c96080d34bf2a5706249400b7ce628

    • SHA256

      3476ec90446319bc219e9c21a2672cd47f269a0d18e906778a781c802cc53503

    • SHA512

      1ae90d308ff816bfcb4c20d6e7705d17e71400c4b7b1c90dd6ec8948217d8b57f83dfc2d61f0373a49fc6e41dba8bd044714b7988cfcf85d1bb2e213df01b2e8

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks