General

  • Target

    f7c00b5a0858165cd556979fd6ae8524cb84ce3193eff5a9c95a287a91611b92

  • Size

    297KB

  • Sample

    241107-nq5m1s1hpj

  • MD5

    29e08ab0e01d97fd6b3f3dfbb5dcf06c

  • SHA1

    8520cbc77517ed25df4b86818852c5e3e1c96879

  • SHA256

    f7c00b5a0858165cd556979fd6ae8524cb84ce3193eff5a9c95a287a91611b92

  • SHA512

    a7e3dc729764415243db8666048783d23ed68c7b1916f4d43ce20364bfa54529afc6028a6b810c25aa274d05430afee3a66d7b8b37ddf75a8689a273d8fd627a

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f7c00b5a0858165cd556979fd6ae8524cb84ce3193eff5a9c95a287a91611b92

    • Size

      297KB

    • MD5

      29e08ab0e01d97fd6b3f3dfbb5dcf06c

    • SHA1

      8520cbc77517ed25df4b86818852c5e3e1c96879

    • SHA256

      f7c00b5a0858165cd556979fd6ae8524cb84ce3193eff5a9c95a287a91611b92

    • SHA512

      a7e3dc729764415243db8666048783d23ed68c7b1916f4d43ce20364bfa54529afc6028a6b810c25aa274d05430afee3a66d7b8b37ddf75a8689a273d8fd627a

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks