General

  • Target

    0745f64fa06fad296c45a0e00f323d73cbd5df57caf17d0e344aeaaa168fbe83

  • Size

    297KB

  • Sample

    241108-3b6n4asclp

  • MD5

    aa6ff8340fc1f5f9556a0b8e2be760e0

  • SHA1

    66ef568ad1ff8bd41b1fe0be7216459bf6461d56

  • SHA256

    0745f64fa06fad296c45a0e00f323d73cbd5df57caf17d0e344aeaaa168fbe83

  • SHA512

    b02c93f27779763ccf0a3d4d6235e96f51a8782403a5fe3e3016087e1600956215fa1e05a069ae4aab51db67c1adf039ffe6dfa588914c98cc40d07d16e5604b

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      0745f64fa06fad296c45a0e00f323d73cbd5df57caf17d0e344aeaaa168fbe83

    • Size

      297KB

    • MD5

      aa6ff8340fc1f5f9556a0b8e2be760e0

    • SHA1

      66ef568ad1ff8bd41b1fe0be7216459bf6461d56

    • SHA256

      0745f64fa06fad296c45a0e00f323d73cbd5df57caf17d0e344aeaaa168fbe83

    • SHA512

      b02c93f27779763ccf0a3d4d6235e96f51a8782403a5fe3e3016087e1600956215fa1e05a069ae4aab51db67c1adf039ffe6dfa588914c98cc40d07d16e5604b

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks