General

  • Target

    9b227e5c7843987572181fbf5f7f21058a65966e15edc5f2068ab63d397c496f

  • Size

    423KB

  • Sample

    241107-rjv2sawmdk

  • MD5

    9d7badff4e99c0ecbec23f5680e01a4e

  • SHA1

    c273aa0e8bab5842187fbc7610f1a751e0b4ef14

  • SHA256

    9b227e5c7843987572181fbf5f7f21058a65966e15edc5f2068ab63d397c496f

  • SHA512

    7e6e495c6fcfca4d4c9a188b1e72e736bb75c7aff311c91902b656c20840c5eac00135df68997e1a545655bf0fd423d27715a9cdd3a3a36996bbd64552c4d9e1

  • SSDEEP

    6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      9b227e5c7843987572181fbf5f7f21058a65966e15edc5f2068ab63d397c496f

    • Size

      423KB

    • MD5

      9d7badff4e99c0ecbec23f5680e01a4e

    • SHA1

      c273aa0e8bab5842187fbc7610f1a751e0b4ef14

    • SHA256

      9b227e5c7843987572181fbf5f7f21058a65966e15edc5f2068ab63d397c496f

    • SHA512

      7e6e495c6fcfca4d4c9a188b1e72e736bb75c7aff311c91902b656c20840c5eac00135df68997e1a545655bf0fd423d27715a9cdd3a3a36996bbd64552c4d9e1

    • SSDEEP

      6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks