General

  • Target

    8479b1e5af5f2c307db41918b0b10a29a740a1487c6b0cb040487044e1c3837d

  • Size

    422KB

  • Sample

    241107-nnbxxs1fqa

  • MD5

    2a6e464878031564120434c5cbc46261

  • SHA1

    7033cab4e376092403c07c6f6fa65a2c8e32cd59

  • SHA256

    8479b1e5af5f2c307db41918b0b10a29a740a1487c6b0cb040487044e1c3837d

  • SHA512

    2740afdcf0fe97b2e0adbe0a2fa8bb12cb63b8b6a6c27aee5ef900a2bcb8fa4dfaf9698c6a9f959dd48a9a729d912545367eda48b0b46b0a712e998cabe39110

  • SSDEEP

    12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      8479b1e5af5f2c307db41918b0b10a29a740a1487c6b0cb040487044e1c3837d

    • Size

      422KB

    • MD5

      2a6e464878031564120434c5cbc46261

    • SHA1

      7033cab4e376092403c07c6f6fa65a2c8e32cd59

    • SHA256

      8479b1e5af5f2c307db41918b0b10a29a740a1487c6b0cb040487044e1c3837d

    • SHA512

      2740afdcf0fe97b2e0adbe0a2fa8bb12cb63b8b6a6c27aee5ef900a2bcb8fa4dfaf9698c6a9f959dd48a9a729d912545367eda48b0b46b0a712e998cabe39110

    • SSDEEP

      12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks