General

  • Target

    f20cfc1fe702b691e8bfaab5f4e02c44df5a3fe233cd98e0e33e5069233e2055

  • Size

    394KB

  • Sample

    241108-b57ppsvmgp

  • MD5

    644d7a3b39943ce0c5654092042b2d37

  • SHA1

    6ffe8504da1c119de8794f7c3687ccba81de8ea0

  • SHA256

    f20cfc1fe702b691e8bfaab5f4e02c44df5a3fe233cd98e0e33e5069233e2055

  • SHA512

    1b80b3f97276bafb3b7a226e1294278c1aeca85dec9a48429529d8777b93d572ce5f4daf3f9159d2cf11cf8f09e833c8955143ae56559f6ce6ae2fd7cf7a2d7c

  • SSDEEP

    6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f20cfc1fe702b691e8bfaab5f4e02c44df5a3fe233cd98e0e33e5069233e2055

    • Size

      394KB

    • MD5

      644d7a3b39943ce0c5654092042b2d37

    • SHA1

      6ffe8504da1c119de8794f7c3687ccba81de8ea0

    • SHA256

      f20cfc1fe702b691e8bfaab5f4e02c44df5a3fe233cd98e0e33e5069233e2055

    • SHA512

      1b80b3f97276bafb3b7a226e1294278c1aeca85dec9a48429529d8777b93d572ce5f4daf3f9159d2cf11cf8f09e833c8955143ae56559f6ce6ae2fd7cf7a2d7c

    • SSDEEP

      6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks