General

  • Target

    89a8c2a2a92928aa940ee8afbee6a7638893e6c800903961552cce16929a68f8

  • Size

    371KB

  • Sample

    241107-f7da4avrby

  • MD5

    0babd9c1469154eb0b490bc47088a5d1

  • SHA1

    b0c4664d2666d7b7f1c70a65d2c083266683a504

  • SHA256

    89a8c2a2a92928aa940ee8afbee6a7638893e6c800903961552cce16929a68f8

  • SHA512

    54fe2ed73aee78cb00ffa7c1b9181278bc0d00c3f104370daef628269eb0195b3124105f8e25c41bb9dbcd0c9b88c01f2c74a9a54087f1e26c8bf280d9a03511

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      89a8c2a2a92928aa940ee8afbee6a7638893e6c800903961552cce16929a68f8

    • Size

      371KB

    • MD5

      0babd9c1469154eb0b490bc47088a5d1

    • SHA1

      b0c4664d2666d7b7f1c70a65d2c083266683a504

    • SHA256

      89a8c2a2a92928aa940ee8afbee6a7638893e6c800903961552cce16929a68f8

    • SHA512

      54fe2ed73aee78cb00ffa7c1b9181278bc0d00c3f104370daef628269eb0195b3124105f8e25c41bb9dbcd0c9b88c01f2c74a9a54087f1e26c8bf280d9a03511

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks