General

  • Target

    35e70bae7b74cac9c2c681fdfc261f5077d41cd65e2eaf921d7f6551eca99e20

  • Size

    370KB

  • Sample

    241107-mhr7aatjcp

  • MD5

    2c7fc77a16920cb2cfbb705932d49edd

  • SHA1

    d89d4778b238f05e4f647e3f5eec6064e628e807

  • SHA256

    35e70bae7b74cac9c2c681fdfc261f5077d41cd65e2eaf921d7f6551eca99e20

  • SHA512

    b9eb4c7cd17796b76d33b3d21a1fbb608f4b0c45719300545e272404bee0e0f3f099974b113945cf8e789a474bfc58023fc97cad5e730ee34e5e9217f7f30140

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      35e70bae7b74cac9c2c681fdfc261f5077d41cd65e2eaf921d7f6551eca99e20

    • Size

      370KB

    • MD5

      2c7fc77a16920cb2cfbb705932d49edd

    • SHA1

      d89d4778b238f05e4f647e3f5eec6064e628e807

    • SHA256

      35e70bae7b74cac9c2c681fdfc261f5077d41cd65e2eaf921d7f6551eca99e20

    • SHA512

      b9eb4c7cd17796b76d33b3d21a1fbb608f4b0c45719300545e272404bee0e0f3f099974b113945cf8e789a474bfc58023fc97cad5e730ee34e5e9217f7f30140

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks