General

  • Target

    9fff368d9a2b9453303ddec3f3fb447b22f10cd0ea2ae882dfdc9ff38be77bf5

  • Size

    297KB

  • Sample

    241108-nqc8rs1jds

  • MD5

    01277713ec69f39ab5127dfd408c31a9

  • SHA1

    d09ef478975aa0ece79d4ce442ca2f1cb50a4cf7

  • SHA256

    9fff368d9a2b9453303ddec3f3fb447b22f10cd0ea2ae882dfdc9ff38be77bf5

  • SHA512

    4b0e6ed2f2a909536f9b04fc401a24a4c7b4ca73b04b3a29e06ab32b61ba1deddf4226e9bd8118289ff4f603198cc69a1d4530cc264a9c63d6fdde63d3b4657a

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      9fff368d9a2b9453303ddec3f3fb447b22f10cd0ea2ae882dfdc9ff38be77bf5

    • Size

      297KB

    • MD5

      01277713ec69f39ab5127dfd408c31a9

    • SHA1

      d09ef478975aa0ece79d4ce442ca2f1cb50a4cf7

    • SHA256

      9fff368d9a2b9453303ddec3f3fb447b22f10cd0ea2ae882dfdc9ff38be77bf5

    • SHA512

      4b0e6ed2f2a909536f9b04fc401a24a4c7b4ca73b04b3a29e06ab32b61ba1deddf4226e9bd8118289ff4f603198cc69a1d4530cc264a9c63d6fdde63d3b4657a

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks