General

  • Target

    8e6bf6774909c117c37e399337813a568e8f5fe3d442536a39eb5c11031d6103

  • Size

    297KB

  • Sample

    241107-d32rsavcjc

  • MD5

    f7993f6088e4659b96725e08a9c72eb0

  • SHA1

    348646fd94dfd31e18e30b3d462c3e8a11657b3b

  • SHA256

    8e6bf6774909c117c37e399337813a568e8f5fe3d442536a39eb5c11031d6103

  • SHA512

    726b2aa98e2bddc65be79dd6f10adc5ac44b4be8a7479cf874cd38569b2c24e006384a386718fcc269c2432054d64926f2d4bb6194c4cef72d67054e99bda088

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      8e6bf6774909c117c37e399337813a568e8f5fe3d442536a39eb5c11031d6103

    • Size

      297KB

    • MD5

      f7993f6088e4659b96725e08a9c72eb0

    • SHA1

      348646fd94dfd31e18e30b3d462c3e8a11657b3b

    • SHA256

      8e6bf6774909c117c37e399337813a568e8f5fe3d442536a39eb5c11031d6103

    • SHA512

      726b2aa98e2bddc65be79dd6f10adc5ac44b4be8a7479cf874cd38569b2c24e006384a386718fcc269c2432054d64926f2d4bb6194c4cef72d67054e99bda088

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks