General

  • Target

    a29ab01fb8e36f015e34303c71e27d018b598587e295bf0c22ed22cf1cc12e82

  • Size

    371KB

  • Sample

    241108-e7x5tsyjbr

  • MD5

    e6d413d1e8dfc27455dc04ae777eab16

  • SHA1

    0cbf12d586ac07708d134d185080575125a9ec96

  • SHA256

    a29ab01fb8e36f015e34303c71e27d018b598587e295bf0c22ed22cf1cc12e82

  • SHA512

    26101aede258d284264b11690708f7203608ca0e0c4fbcbbb2622e61ddf4971ffe289cbada91c09ce31fe630f7a47362279f7861078781c3e721d66377896c83

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a29ab01fb8e36f015e34303c71e27d018b598587e295bf0c22ed22cf1cc12e82

    • Size

      371KB

    • MD5

      e6d413d1e8dfc27455dc04ae777eab16

    • SHA1

      0cbf12d586ac07708d134d185080575125a9ec96

    • SHA256

      a29ab01fb8e36f015e34303c71e27d018b598587e295bf0c22ed22cf1cc12e82

    • SHA512

      26101aede258d284264b11690708f7203608ca0e0c4fbcbbb2622e61ddf4971ffe289cbada91c09ce31fe630f7a47362279f7861078781c3e721d66377896c83

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks