General

  • Target

    db4f67c9e6d6a245597b197ef651a282c1d749104e732450fad74af9dc48fab7

  • Size

    297KB

  • Sample

    241108-frb34avqbw

  • MD5

    ca471eef47fa5eba03b4abd681b371d4

  • SHA1

    9321b8de44e9e7ade667c64b9c0ea45089f094a5

  • SHA256

    db4f67c9e6d6a245597b197ef651a282c1d749104e732450fad74af9dc48fab7

  • SHA512

    36c795435943231d0a39fe16fd6c8b8b21d30e139bb4d97a9765baae09bfb373b11446fb4ff313235ac9b35f5148646d88cedf6c98c2f2d4c9cd4357fd00aca3

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      db4f67c9e6d6a245597b197ef651a282c1d749104e732450fad74af9dc48fab7

    • Size

      297KB

    • MD5

      ca471eef47fa5eba03b4abd681b371d4

    • SHA1

      9321b8de44e9e7ade667c64b9c0ea45089f094a5

    • SHA256

      db4f67c9e6d6a245597b197ef651a282c1d749104e732450fad74af9dc48fab7

    • SHA512

      36c795435943231d0a39fe16fd6c8b8b21d30e139bb4d97a9765baae09bfb373b11446fb4ff313235ac9b35f5148646d88cedf6c98c2f2d4c9cd4357fd00aca3

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks