General

  • Target

    132b89daf808daed07eee9e835dc6b4d66b1f8d05b3f5805111b9891c6f3e0e3

  • Size

    297KB

  • Sample

    241107-qe9tpssgmb

  • MD5

    833fb20f06cc85f21de819ba7301ef68

  • SHA1

    bd33b55759015a7e157bf63802dff9cfa3356296

  • SHA256

    132b89daf808daed07eee9e835dc6b4d66b1f8d05b3f5805111b9891c6f3e0e3

  • SHA512

    2262b74fd2fb819c687ca8bb51db4f40091355b33cf61356db5ce8016567e47d3aba32ed0f15a614c3e0abad4cb0e85d1df49a54015f887cde086232fef42520

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      132b89daf808daed07eee9e835dc6b4d66b1f8d05b3f5805111b9891c6f3e0e3

    • Size

      297KB

    • MD5

      833fb20f06cc85f21de819ba7301ef68

    • SHA1

      bd33b55759015a7e157bf63802dff9cfa3356296

    • SHA256

      132b89daf808daed07eee9e835dc6b4d66b1f8d05b3f5805111b9891c6f3e0e3

    • SHA512

      2262b74fd2fb819c687ca8bb51db4f40091355b33cf61356db5ce8016567e47d3aba32ed0f15a614c3e0abad4cb0e85d1df49a54015f887cde086232fef42520

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks