General

  • Target

    8452aa4b235a923e8047f96d5f7f7ce65795315a9752e3763997fee9ead1bf1a

  • Size

    297KB

  • Sample

    241108-mverqaznev

  • MD5

    6565a6971d144e95e312cedd472cdb68

  • SHA1

    5ef7f48ee8d11d704d5d40910ed3e9f5b8c7ca47

  • SHA256

    8452aa4b235a923e8047f96d5f7f7ce65795315a9752e3763997fee9ead1bf1a

  • SHA512

    55cb8a590001b47adec848e7af32ece9bb77bbb6fb06ffae756a366508aa4217827b99771beaef75590b35d1cc16b20fecb5b7be985c748188ab6560e7764cba

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      8452aa4b235a923e8047f96d5f7f7ce65795315a9752e3763997fee9ead1bf1a

    • Size

      297KB

    • MD5

      6565a6971d144e95e312cedd472cdb68

    • SHA1

      5ef7f48ee8d11d704d5d40910ed3e9f5b8c7ca47

    • SHA256

      8452aa4b235a923e8047f96d5f7f7ce65795315a9752e3763997fee9ead1bf1a

    • SHA512

      55cb8a590001b47adec848e7af32ece9bb77bbb6fb06ffae756a366508aa4217827b99771beaef75590b35d1cc16b20fecb5b7be985c748188ab6560e7764cba

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks