General

  • Target

    62b4aa59e9633e069a92d3966be45b866399b1233896fb21ab069401914874bb

  • Size

    438KB

  • Sample

    241107-p7vptasgjq

  • MD5

    97a40ccef441feb07b2b54bb44526734

  • SHA1

    846df1d49ecdc35a9b14ad48c27aa9f89c7267e6

  • SHA256

    62b4aa59e9633e069a92d3966be45b866399b1233896fb21ab069401914874bb

  • SHA512

    a5218acd6594ae8a289010329db06cd224d966ae55f5b36e05b86f3345e17c3c3b345c54521d10eb614bc97ead71e1da4a14328226fcc74cb506107127697972

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      62b4aa59e9633e069a92d3966be45b866399b1233896fb21ab069401914874bb

    • Size

      438KB

    • MD5

      97a40ccef441feb07b2b54bb44526734

    • SHA1

      846df1d49ecdc35a9b14ad48c27aa9f89c7267e6

    • SHA256

      62b4aa59e9633e069a92d3966be45b866399b1233896fb21ab069401914874bb

    • SHA512

      a5218acd6594ae8a289010329db06cd224d966ae55f5b36e05b86f3345e17c3c3b345c54521d10eb614bc97ead71e1da4a14328226fcc74cb506107127697972

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks