General

  • Target

    12eb352365be5ea76a9b06b4ecc5ca65332269b1cd54daf1166d52b565d4ef73

  • Size

    373KB

  • Sample

    241108-gqvz9azjdk

  • MD5

    68853852c8175364f9c08a4016e8938d

  • SHA1

    9313be936d2caaf031180c9a8bb6c780e33f3de9

  • SHA256

    12eb352365be5ea76a9b06b4ecc5ca65332269b1cd54daf1166d52b565d4ef73

  • SHA512

    5a8c107c7be4117be6c3f277cd55334ab599b9bfdf58f7c9cff3778b71e9e4711190d7b05ec0bfc22a99e5f767690137cf4b5e65a35bb76c1e381543e8a3dd91

  • SSDEEP

    6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      12eb352365be5ea76a9b06b4ecc5ca65332269b1cd54daf1166d52b565d4ef73

    • Size

      373KB

    • MD5

      68853852c8175364f9c08a4016e8938d

    • SHA1

      9313be936d2caaf031180c9a8bb6c780e33f3de9

    • SHA256

      12eb352365be5ea76a9b06b4ecc5ca65332269b1cd54daf1166d52b565d4ef73

    • SHA512

      5a8c107c7be4117be6c3f277cd55334ab599b9bfdf58f7c9cff3778b71e9e4711190d7b05ec0bfc22a99e5f767690137cf4b5e65a35bb76c1e381543e8a3dd91

    • SSDEEP

      6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks