General

  • Target

    0fc6fc3266d0d0e9d0f089d789be6cc3a6afc9f850922cb226cca9fdd54a7bf7

  • Size

    298KB

  • Sample

    241108-d92qcsvdmr

  • MD5

    1152aec0b9a3f17e4832c1bf9a98c536

  • SHA1

    af925796ba635f60d4c912abf02fa639f456b18b

  • SHA256

    0fc6fc3266d0d0e9d0f089d789be6cc3a6afc9f850922cb226cca9fdd54a7bf7

  • SHA512

    372cf336899710d3b7753976705e4571a409360c6b3e8b4d6691786da9a7bbe04ede6d9b7e399ffb2ba201cb5b056243567a0ebf67debf6d2bdf6500d167fb43

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      0fc6fc3266d0d0e9d0f089d789be6cc3a6afc9f850922cb226cca9fdd54a7bf7

    • Size

      298KB

    • MD5

      1152aec0b9a3f17e4832c1bf9a98c536

    • SHA1

      af925796ba635f60d4c912abf02fa639f456b18b

    • SHA256

      0fc6fc3266d0d0e9d0f089d789be6cc3a6afc9f850922cb226cca9fdd54a7bf7

    • SHA512

      372cf336899710d3b7753976705e4571a409360c6b3e8b4d6691786da9a7bbe04ede6d9b7e399ffb2ba201cb5b056243567a0ebf67debf6d2bdf6500d167fb43

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks