General

  • Target

    724eefa11da80d5fe39ccf0020689096c01b16bb3333fc0714db0418b318204c

  • Size

    371KB

  • Sample

    241107-lhf9casmfq

  • MD5

    b91ad4854e4566dbdf2339d82aa86075

  • SHA1

    6f26f574c3a7cdc49b1d572f2aed475d5868bd82

  • SHA256

    724eefa11da80d5fe39ccf0020689096c01b16bb3333fc0714db0418b318204c

  • SHA512

    7cad5a2b6d8732edff0b562990cc6af1349def381bafb92713cf8d822387d2c6b6846cecd8582b9a273491973b1f3b171c3ea470af1beea88a2223a7aee2530c

  • SSDEEP

    6144:K5T6cP+DC7WJrK3tg4LobitExnGRZyodb7ITsqXigaXwVfh:K5T6cEKWJMW7GR5h7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      724eefa11da80d5fe39ccf0020689096c01b16bb3333fc0714db0418b318204c

    • Size

      371KB

    • MD5

      b91ad4854e4566dbdf2339d82aa86075

    • SHA1

      6f26f574c3a7cdc49b1d572f2aed475d5868bd82

    • SHA256

      724eefa11da80d5fe39ccf0020689096c01b16bb3333fc0714db0418b318204c

    • SHA512

      7cad5a2b6d8732edff0b562990cc6af1349def381bafb92713cf8d822387d2c6b6846cecd8582b9a273491973b1f3b171c3ea470af1beea88a2223a7aee2530c

    • SSDEEP

      6144:K5T6cP+DC7WJrK3tg4LobitExnGRZyodb7ITsqXigaXwVfh:K5T6cEKWJMW7GR5h7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks