General

  • Target

    e233a953de08a5cd5c2165599f3dadd69f4906672aab6348b468fee0437483c3

  • Size

    423KB

  • Sample

    241107-p7s6zssgjn

  • MD5

    d0826dd9f7aaac99ef169ee58fd0fd29

  • SHA1

    f9a9747b43a65c3eea5bc28bbc0df6003f0e0343

  • SHA256

    e233a953de08a5cd5c2165599f3dadd69f4906672aab6348b468fee0437483c3

  • SHA512

    6edd50e465e9e1370bceaa4d5880597f2b3ce56d0f3243781bdbb013c2e77498cb8cc983873356004ea9ba22481d5cc9ffa6afbe27a3e98e4bba1b8ec247a37e

  • SSDEEP

    6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      e233a953de08a5cd5c2165599f3dadd69f4906672aab6348b468fee0437483c3

    • Size

      423KB

    • MD5

      d0826dd9f7aaac99ef169ee58fd0fd29

    • SHA1

      f9a9747b43a65c3eea5bc28bbc0df6003f0e0343

    • SHA256

      e233a953de08a5cd5c2165599f3dadd69f4906672aab6348b468fee0437483c3

    • SHA512

      6edd50e465e9e1370bceaa4d5880597f2b3ce56d0f3243781bdbb013c2e77498cb8cc983873356004ea9ba22481d5cc9ffa6afbe27a3e98e4bba1b8ec247a37e

    • SSDEEP

      6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks