General

  • Target

    fcec0f84a7ea5d0fb12a29cb109a23d64de99fd50131759c826eb4cabced0226

  • Size

    438KB

  • Sample

    241108-ta4cxatqf1

  • MD5

    388c2c20bd9fcc9ccf25dfdd8bdd6647

  • SHA1

    e9098353ef8e5a3304a5da052ac65211726db1aa

  • SHA256

    fcec0f84a7ea5d0fb12a29cb109a23d64de99fd50131759c826eb4cabced0226

  • SHA512

    4c2f62ae1cd68de642ea61f4c74d8c370944609cb1e3cbc77d7f948c2e025d20a57b6153ce365b177468a7289f5c9a8128071cf37a428b9afc2982bb9a60aef9

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      fcec0f84a7ea5d0fb12a29cb109a23d64de99fd50131759c826eb4cabced0226

    • Size

      438KB

    • MD5

      388c2c20bd9fcc9ccf25dfdd8bdd6647

    • SHA1

      e9098353ef8e5a3304a5da052ac65211726db1aa

    • SHA256

      fcec0f84a7ea5d0fb12a29cb109a23d64de99fd50131759c826eb4cabced0226

    • SHA512

      4c2f62ae1cd68de642ea61f4c74d8c370944609cb1e3cbc77d7f948c2e025d20a57b6153ce365b177468a7289f5c9a8128071cf37a428b9afc2982bb9a60aef9

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks