General

  • Target

    e97963bbef6c9b1b186e9c2de1f70aba5e0b19318afeead1f76f79fb1f4b725d

  • Size

    371KB

  • Sample

    241107-hmf8csyamp

  • MD5

    0de6e4d4949ed405f61bc87c45cd33b3

  • SHA1

    b4692e53fba1c6801f1f8f06cc01d3cbf876fde2

  • SHA256

    e97963bbef6c9b1b186e9c2de1f70aba5e0b19318afeead1f76f79fb1f4b725d

  • SHA512

    aacc7ad0170ee8f6bfada6c359150ec5cec90ffefcea4abbb20fa84d8ff08d59e771ae9fad8dd219101af6b5bf1e5f4f7d81c34bdb804da57c6f189e796af87d

  • SSDEEP

    6144:K5T6cP+DC7WJrK3tg4LobitExnGRZyodb7ITsqXigaXwVfh:K5T6cEKWJMW7GR5h7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      e97963bbef6c9b1b186e9c2de1f70aba5e0b19318afeead1f76f79fb1f4b725d

    • Size

      371KB

    • MD5

      0de6e4d4949ed405f61bc87c45cd33b3

    • SHA1

      b4692e53fba1c6801f1f8f06cc01d3cbf876fde2

    • SHA256

      e97963bbef6c9b1b186e9c2de1f70aba5e0b19318afeead1f76f79fb1f4b725d

    • SHA512

      aacc7ad0170ee8f6bfada6c359150ec5cec90ffefcea4abbb20fa84d8ff08d59e771ae9fad8dd219101af6b5bf1e5f4f7d81c34bdb804da57c6f189e796af87d

    • SSDEEP

      6144:K5T6cP+DC7WJrK3tg4LobitExnGRZyodb7ITsqXigaXwVfh:K5T6cEKWJMW7GR5h7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks