General

  • Target

    899f7fe7a8759e41a6bae536250c80037a7a384f8e3ee067ce980701274dcf25

  • Size

    371KB

  • Sample

    241108-d8cpvaxlcp

  • MD5

    808803caa7e3de7827147f4dbfbd6fa7

  • SHA1

    7ae91d3f6172b3faba6199ef9b3516ec0a7b2749

  • SHA256

    899f7fe7a8759e41a6bae536250c80037a7a384f8e3ee067ce980701274dcf25

  • SHA512

    7615cb549a1750fde093f3a7eb9c188196aa588361e223978e5d1deb070be11412ec099649f832ce82742fd8e4cbde19520068b927250aeef734f64b2e58e492

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      899f7fe7a8759e41a6bae536250c80037a7a384f8e3ee067ce980701274dcf25

    • Size

      371KB

    • MD5

      808803caa7e3de7827147f4dbfbd6fa7

    • SHA1

      7ae91d3f6172b3faba6199ef9b3516ec0a7b2749

    • SHA256

      899f7fe7a8759e41a6bae536250c80037a7a384f8e3ee067ce980701274dcf25

    • SHA512

      7615cb549a1750fde093f3a7eb9c188196aa588361e223978e5d1deb070be11412ec099649f832ce82742fd8e4cbde19520068b927250aeef734f64b2e58e492

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks