General

  • Target

    7fc31353bee92ed45c883322f70aceb37cbbbb7d7f851467dec05e64e7fa3bce

  • Size

    297KB

  • Sample

    241107-fraj9swglj

  • MD5

    e1b6e022e12346bc6ef064d838992ebb

  • SHA1

    875fa69c6cc7f13eea688ffd13435407eef9bad0

  • SHA256

    7fc31353bee92ed45c883322f70aceb37cbbbb7d7f851467dec05e64e7fa3bce

  • SHA512

    c04bf2b164f5dfbc121020619eb35cbb2b044fb2592bd13a1e59d01574c476ae6cef8053e498d24d50de4ca4b3cf4d17ea5a4672f7e74d6b364b11e7b2dbb6a1

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7fc31353bee92ed45c883322f70aceb37cbbbb7d7f851467dec05e64e7fa3bce

    • Size

      297KB

    • MD5

      e1b6e022e12346bc6ef064d838992ebb

    • SHA1

      875fa69c6cc7f13eea688ffd13435407eef9bad0

    • SHA256

      7fc31353bee92ed45c883322f70aceb37cbbbb7d7f851467dec05e64e7fa3bce

    • SHA512

      c04bf2b164f5dfbc121020619eb35cbb2b044fb2592bd13a1e59d01574c476ae6cef8053e498d24d50de4ca4b3cf4d17ea5a4672f7e74d6b364b11e7b2dbb6a1

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks