General

  • Target

    d43e83dbedf2ddd4d95a77c40a063b4dffaddb65535b0e7f3b481bed96d39c78

  • Size

    298KB

  • Sample

    241107-fyqvtswepg

  • MD5

    367ebcbd05a8da3fb1b26a35f1326f13

  • SHA1

    d5d9a8e77adf828a2c00a4d341ab945aa81ca9f1

  • SHA256

    d43e83dbedf2ddd4d95a77c40a063b4dffaddb65535b0e7f3b481bed96d39c78

  • SHA512

    ebb2fb3d98c1b337fb06d75036055e4f668f53cb7713005e95f19ff5addd4b3ed75d1125b1a22d3d06120fc6817643dfa7f973b07d10736a07d7b84299e3bba5

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d43e83dbedf2ddd4d95a77c40a063b4dffaddb65535b0e7f3b481bed96d39c78

    • Size

      298KB

    • MD5

      367ebcbd05a8da3fb1b26a35f1326f13

    • SHA1

      d5d9a8e77adf828a2c00a4d341ab945aa81ca9f1

    • SHA256

      d43e83dbedf2ddd4d95a77c40a063b4dffaddb65535b0e7f3b481bed96d39c78

    • SHA512

      ebb2fb3d98c1b337fb06d75036055e4f668f53cb7713005e95f19ff5addd4b3ed75d1125b1a22d3d06120fc6817643dfa7f973b07d10736a07d7b84299e3bba5

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks