General

  • Target

    fc4f3fc92e8285e367b343c5dce45b7c56635893952797e16e0b18f42e94576a

  • Size

    427KB

  • Sample

    241107-taq3ksvfnj

  • MD5

    ff2d7f9f2181767b19fe7e3616ac77f9

  • SHA1

    bb6ff596de3bb8e4a6f466f93eeeaf00fd0417b2

  • SHA256

    fc4f3fc92e8285e367b343c5dce45b7c56635893952797e16e0b18f42e94576a

  • SHA512

    8834d9ef202349b185a632796e10e3aa7a09581168ac335de76f612e62b07254f555b3c6309ce69e5edf29cc9e6542b599772c7f8392853648bbf8d306b90433

  • SSDEEP

    12288:bI98VfhyNpDL3EwI6si3LbQMojbyZSnPsUx34:gx1EwNCyOP9S

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      fc4f3fc92e8285e367b343c5dce45b7c56635893952797e16e0b18f42e94576a

    • Size

      427KB

    • MD5

      ff2d7f9f2181767b19fe7e3616ac77f9

    • SHA1

      bb6ff596de3bb8e4a6f466f93eeeaf00fd0417b2

    • SHA256

      fc4f3fc92e8285e367b343c5dce45b7c56635893952797e16e0b18f42e94576a

    • SHA512

      8834d9ef202349b185a632796e10e3aa7a09581168ac335de76f612e62b07254f555b3c6309ce69e5edf29cc9e6542b599772c7f8392853648bbf8d306b90433

    • SSDEEP

      12288:bI98VfhyNpDL3EwI6si3LbQMojbyZSnPsUx34:gx1EwNCyOP9S

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks