General

  • Target

    1c5a394abb707ca7e0eef2303c5ea106509110062772768542b6d236c41cd9d0

  • Size

    371KB

  • Sample

    241107-q19e3atbpn

  • MD5

    f18e56946d40fd07f5d70f9b291635c0

  • SHA1

    e5fb925736a78c5cbdf0b2c85fcb8eda2c9a036b

  • SHA256

    1c5a394abb707ca7e0eef2303c5ea106509110062772768542b6d236c41cd9d0

  • SHA512

    3322a5ac5cecabd6d87fb7f8bf9f2798b70f5bac844cb778423d52a68ddc0caf7c1d27c615da9a687d87bf61831b3a7c7f0db7aea61a504cf84fe09787f5a61f

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      1c5a394abb707ca7e0eef2303c5ea106509110062772768542b6d236c41cd9d0

    • Size

      371KB

    • MD5

      f18e56946d40fd07f5d70f9b291635c0

    • SHA1

      e5fb925736a78c5cbdf0b2c85fcb8eda2c9a036b

    • SHA256

      1c5a394abb707ca7e0eef2303c5ea106509110062772768542b6d236c41cd9d0

    • SHA512

      3322a5ac5cecabd6d87fb7f8bf9f2798b70f5bac844cb778423d52a68ddc0caf7c1d27c615da9a687d87bf61831b3a7c7f0db7aea61a504cf84fe09787f5a61f

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks