General

  • Target

    df7e87baa56e08ae6e7c963c8c3deeb03c7c9930427e9ca96f752d3f02baba97

  • Size

    423KB

  • Sample

    241108-ea62gaxlhm

  • MD5

    2b83fdf849a15357e085376003f65a3a

  • SHA1

    e0614c7fdd80b4df3f21d29c5183135099e234b3

  • SHA256

    df7e87baa56e08ae6e7c963c8c3deeb03c7c9930427e9ca96f752d3f02baba97

  • SHA512

    92b6f1f86cf699cfb999e425d2187c4e20c17cc0ef7d1f79052d5216cd0b7a4ea249a2f1be28c7fc47dc315a2d706ac804c026ba9428653528bb18b826b71a8f

  • SSDEEP

    6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      df7e87baa56e08ae6e7c963c8c3deeb03c7c9930427e9ca96f752d3f02baba97

    • Size

      423KB

    • MD5

      2b83fdf849a15357e085376003f65a3a

    • SHA1

      e0614c7fdd80b4df3f21d29c5183135099e234b3

    • SHA256

      df7e87baa56e08ae6e7c963c8c3deeb03c7c9930427e9ca96f752d3f02baba97

    • SHA512

      92b6f1f86cf699cfb999e425d2187c4e20c17cc0ef7d1f79052d5216cd0b7a4ea249a2f1be28c7fc47dc315a2d706ac804c026ba9428653528bb18b826b71a8f

    • SSDEEP

      6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks