General

  • Target

    d6725804492cd6e8aeda3cf78cafa7f9928723c9b258f40de50e0ebc88eae8b7

  • Size

    371KB

  • Sample

    241108-kbvygszanp

  • MD5

    249020b405ebeb7aae982fc6259867f0

  • SHA1

    a615c3ff8b1b9f2e379efb9a91aece883fd5a34d

  • SHA256

    d6725804492cd6e8aeda3cf78cafa7f9928723c9b258f40de50e0ebc88eae8b7

  • SHA512

    41984a9576f4a605bc62fd7d5822706e09def2200ed907ac2c0c04b01e8ac86c54891bf57932873f0d7081a5de93a9eff4e5e74134eda1539dca2a729203c5e9

  • SSDEEP

    6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d6725804492cd6e8aeda3cf78cafa7f9928723c9b258f40de50e0ebc88eae8b7

    • Size

      371KB

    • MD5

      249020b405ebeb7aae982fc6259867f0

    • SHA1

      a615c3ff8b1b9f2e379efb9a91aece883fd5a34d

    • SHA256

      d6725804492cd6e8aeda3cf78cafa7f9928723c9b258f40de50e0ebc88eae8b7

    • SHA512

      41984a9576f4a605bc62fd7d5822706e09def2200ed907ac2c0c04b01e8ac86c54891bf57932873f0d7081a5de93a9eff4e5e74134eda1539dca2a729203c5e9

    • SSDEEP

      6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks