General

  • Target

    4241fa2948654d5befa3f32e1adfcec7333a46d4d2307428823925812781587e

  • Size

    297KB

  • Sample

    241108-jvvw6ayene

  • MD5

    86984ef1647cac1f8d3a6438415f1fdf

  • SHA1

    a51f77e916222beee249ffa4add5ad2d3881749c

  • SHA256

    4241fa2948654d5befa3f32e1adfcec7333a46d4d2307428823925812781587e

  • SHA512

    647fe08e2ad66deabd2e76738dee2b9ae80989224e801279279c7cf69d0875ba183272b7623926fe8c9c7dbf6afc869dd66907b663c56515960414e8f757927b

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      4241fa2948654d5befa3f32e1adfcec7333a46d4d2307428823925812781587e

    • Size

      297KB

    • MD5

      86984ef1647cac1f8d3a6438415f1fdf

    • SHA1

      a51f77e916222beee249ffa4add5ad2d3881749c

    • SHA256

      4241fa2948654d5befa3f32e1adfcec7333a46d4d2307428823925812781587e

    • SHA512

      647fe08e2ad66deabd2e76738dee2b9ae80989224e801279279c7cf69d0875ba183272b7623926fe8c9c7dbf6afc869dd66907b663c56515960414e8f757927b

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks