General

  • Target

    51aa6700ba1a0c97c36713318a9a60e16858c969179770dabd126015fc852843

  • Size

    438KB

  • Sample

    241108-d7p9jsvcmd

  • MD5

    92a4039f72d9585daf5a6a81bfc943be

  • SHA1

    943b53af44d1b0fcab130efb5c5279381c3545da

  • SHA256

    51aa6700ba1a0c97c36713318a9a60e16858c969179770dabd126015fc852843

  • SHA512

    3f0604931ab735463d039a8363fcbaaa4c41d83029bd8d59863d4e221c5cf13296e5ff4a1db7365b2618bfca32de816f11ad54aee9f28bc1abd087448e717866

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      51aa6700ba1a0c97c36713318a9a60e16858c969179770dabd126015fc852843

    • Size

      438KB

    • MD5

      92a4039f72d9585daf5a6a81bfc943be

    • SHA1

      943b53af44d1b0fcab130efb5c5279381c3545da

    • SHA256

      51aa6700ba1a0c97c36713318a9a60e16858c969179770dabd126015fc852843

    • SHA512

      3f0604931ab735463d039a8363fcbaaa4c41d83029bd8d59863d4e221c5cf13296e5ff4a1db7365b2618bfca32de816f11ad54aee9f28bc1abd087448e717866

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks