General

  • Target

    9712e8cf544fd313af7d508009d15a785a089e86cf8bcc2927eda4ce675f94dc

  • Size

    422KB

  • Sample

    241107-rsar7swnhn

  • MD5

    71bb4031cfe4da76885679f28a804f81

  • SHA1

    55b6d05baf2feefe547fad0c77a9692aadb153af

  • SHA256

    9712e8cf544fd313af7d508009d15a785a089e86cf8bcc2927eda4ce675f94dc

  • SHA512

    f2f035938b201e5cc1193ea2702a531278569c16ee5312efa8be85241841fabd60dd2145c6522787f724e53751e5ece2efcb01b1e939fd5f1e5e20f522f87137

  • SSDEEP

    12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      9712e8cf544fd313af7d508009d15a785a089e86cf8bcc2927eda4ce675f94dc

    • Size

      422KB

    • MD5

      71bb4031cfe4da76885679f28a804f81

    • SHA1

      55b6d05baf2feefe547fad0c77a9692aadb153af

    • SHA256

      9712e8cf544fd313af7d508009d15a785a089e86cf8bcc2927eda4ce675f94dc

    • SHA512

      f2f035938b201e5cc1193ea2702a531278569c16ee5312efa8be85241841fabd60dd2145c6522787f724e53751e5ece2efcb01b1e939fd5f1e5e20f522f87137

    • SSDEEP

      12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks