General

  • Target

    0a6f208b51cc6dc7529e9dc7f8daf1aeea29903063b2e03fc725d4e0cb0b3457

  • Size

    297KB

  • Sample

    241107-emx94avfra

  • MD5

    42b8880a1dadfadf47bf0e1923b23714

  • SHA1

    f68d333367a2a7583db899f065147c05b36b4d31

  • SHA256

    0a6f208b51cc6dc7529e9dc7f8daf1aeea29903063b2e03fc725d4e0cb0b3457

  • SHA512

    e535a2efb2a99996f2ff46e315f0c554dabedea7df3ca6d285c91ee2fd47b9d17b36a65fbc256287ad9a247e4ca18d514a79f87ab57bbb40bc41a81e4d404707

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      0a6f208b51cc6dc7529e9dc7f8daf1aeea29903063b2e03fc725d4e0cb0b3457

    • Size

      297KB

    • MD5

      42b8880a1dadfadf47bf0e1923b23714

    • SHA1

      f68d333367a2a7583db899f065147c05b36b4d31

    • SHA256

      0a6f208b51cc6dc7529e9dc7f8daf1aeea29903063b2e03fc725d4e0cb0b3457

    • SHA512

      e535a2efb2a99996f2ff46e315f0c554dabedea7df3ca6d285c91ee2fd47b9d17b36a65fbc256287ad9a247e4ca18d514a79f87ab57bbb40bc41a81e4d404707

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks