General

  • Target

    8b87cd97c9bf03a4ee55d95c012b7dc129db9f4f078f08cab3daa8b451a32157

  • Size

    423KB

  • Sample

    241108-fh9b8svng1

  • MD5

    27cf51acc0500e68a2ff72f3b75bc530

  • SHA1

    8b6ec74baa1d1799e633c8871280f682d9a82ea9

  • SHA256

    8b87cd97c9bf03a4ee55d95c012b7dc129db9f4f078f08cab3daa8b451a32157

  • SHA512

    d9df9a7349acd189cc6619524e6d4609de4bc5eff151626cb95fb7ad266a640191fb16dfe6669206fb5a676bf335ee388b8f5525ddf7061814e244d54c8bb3f2

  • SSDEEP

    6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      8b87cd97c9bf03a4ee55d95c012b7dc129db9f4f078f08cab3daa8b451a32157

    • Size

      423KB

    • MD5

      27cf51acc0500e68a2ff72f3b75bc530

    • SHA1

      8b6ec74baa1d1799e633c8871280f682d9a82ea9

    • SHA256

      8b87cd97c9bf03a4ee55d95c012b7dc129db9f4f078f08cab3daa8b451a32157

    • SHA512

      d9df9a7349acd189cc6619524e6d4609de4bc5eff151626cb95fb7ad266a640191fb16dfe6669206fb5a676bf335ee388b8f5525ddf7061814e244d54c8bb3f2

    • SSDEEP

      6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks