General

  • Target

    dd7c36a32848d38126b5e31901fa7552d5ac4d2292355421acf22d06a425937d

  • Size

    423KB

  • Sample

    241107-hg817axhrl

  • MD5

    d69d8dc7960c366e63dd659e76bdf65a

  • SHA1

    67c994f133806714dfd0fb6615468397d5f047c5

  • SHA256

    dd7c36a32848d38126b5e31901fa7552d5ac4d2292355421acf22d06a425937d

  • SHA512

    ff6c2f2a051d610fe6d59984120f1c4683a54a84d4d9ff813b8984fb4525b25eaafb0e55ef2cfbcdced4d633585ea447638ab8e4daa1cc59266c9cb1405fc7a5

  • SSDEEP

    6144:cMui5ObVmy+0LExccD4HOCL+qzPI1vCyuKkYi82Jzj6efYPV0p:GrLExjiOCyqzPI1vCyuKkBJzjL

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      dd7c36a32848d38126b5e31901fa7552d5ac4d2292355421acf22d06a425937d

    • Size

      423KB

    • MD5

      d69d8dc7960c366e63dd659e76bdf65a

    • SHA1

      67c994f133806714dfd0fb6615468397d5f047c5

    • SHA256

      dd7c36a32848d38126b5e31901fa7552d5ac4d2292355421acf22d06a425937d

    • SHA512

      ff6c2f2a051d610fe6d59984120f1c4683a54a84d4d9ff813b8984fb4525b25eaafb0e55ef2cfbcdced4d633585ea447638ab8e4daa1cc59266c9cb1405fc7a5

    • SSDEEP

      6144:cMui5ObVmy+0LExccD4HOCL+qzPI1vCyuKkYi82Jzj6efYPV0p:GrLExjiOCyqzPI1vCyuKkBJzjL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks