General

  • Target

    b06c6ee0be28dbedb04ee6a03d1d293c3b0b53e31371e57f1cd8d897a2162efe

  • Size

    423KB

  • Sample

    241108-me2asa1cln

  • MD5

    2cbb56613390589fa5b7691df8552da9

  • SHA1

    3db0231aa30bb804ca027a72de1720321d1ccf45

  • SHA256

    b06c6ee0be28dbedb04ee6a03d1d293c3b0b53e31371e57f1cd8d897a2162efe

  • SHA512

    b1683ef12259d9fea44fb5fdd9c2344a6eb0d70bd5bedcae2120709f0bc4cf8fd477ed963813065dbe9b5276e54b3d443dce590d4ca76adb9adfe686f1d4e45e

  • SSDEEP

    12288:u4rXu0OVUf2Au746adZtIzkNDtZuFM9bT6f+N:1lOG2tJ89tMUI+

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      b06c6ee0be28dbedb04ee6a03d1d293c3b0b53e31371e57f1cd8d897a2162efe

    • Size

      423KB

    • MD5

      2cbb56613390589fa5b7691df8552da9

    • SHA1

      3db0231aa30bb804ca027a72de1720321d1ccf45

    • SHA256

      b06c6ee0be28dbedb04ee6a03d1d293c3b0b53e31371e57f1cd8d897a2162efe

    • SHA512

      b1683ef12259d9fea44fb5fdd9c2344a6eb0d70bd5bedcae2120709f0bc4cf8fd477ed963813065dbe9b5276e54b3d443dce590d4ca76adb9adfe686f1d4e45e

    • SSDEEP

      12288:u4rXu0OVUf2Au746adZtIzkNDtZuFM9bT6f+N:1lOG2tJ89tMUI+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks