General

  • Target

    a92e3a105c1880e70606f756b200cd9cb5735a741a44b589bd5f5f6e4febf106

  • Size

    438KB

  • Sample

    241108-hwpabsxkew

  • MD5

    57e5106e6b7e221d4567be2941b90535

  • SHA1

    1d7cda700f0ba79a0a503b5a9b212494038e7b9f

  • SHA256

    a92e3a105c1880e70606f756b200cd9cb5735a741a44b589bd5f5f6e4febf106

  • SHA512

    0554dbea9729d61423fefca4101561ad7918df9967cb0115a59d4c0926ca7e24f99f3a55299a68b12acc118ae20fa71d818482a6849049d400d7da37694a1195

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a92e3a105c1880e70606f756b200cd9cb5735a741a44b589bd5f5f6e4febf106

    • Size

      438KB

    • MD5

      57e5106e6b7e221d4567be2941b90535

    • SHA1

      1d7cda700f0ba79a0a503b5a9b212494038e7b9f

    • SHA256

      a92e3a105c1880e70606f756b200cd9cb5735a741a44b589bd5f5f6e4febf106

    • SHA512

      0554dbea9729d61423fefca4101561ad7918df9967cb0115a59d4c0926ca7e24f99f3a55299a68b12acc118ae20fa71d818482a6849049d400d7da37694a1195

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks