General

  • Target

    e9cbaa1a70629e62990b92d586e3ea1f2cb1d82cd7c8ad17aeea24c9d1e09d99

  • Size

    423KB

  • Sample

    241108-vymwhaymdj

  • MD5

    1763b3fb267e7b99c5b406480fcdecc7

  • SHA1

    bd1891824c0c16d3fecf17316fa33e3f6f8b6482

  • SHA256

    e9cbaa1a70629e62990b92d586e3ea1f2cb1d82cd7c8ad17aeea24c9d1e09d99

  • SHA512

    bfd52162c9228e3ea9b51773f4dd7e4f7a1f25548a41a775c22adcd815b3de8766fb28b6e35dff85ca402700bd530a41920708d94e1361ec897d451d3236e6a7

  • SSDEEP

    12288:u4rXu0OVUf2Au746adZtIzkNDtZuFM9bT6f+N:1lOG2tJ89tMUI+

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      e9cbaa1a70629e62990b92d586e3ea1f2cb1d82cd7c8ad17aeea24c9d1e09d99

    • Size

      423KB

    • MD5

      1763b3fb267e7b99c5b406480fcdecc7

    • SHA1

      bd1891824c0c16d3fecf17316fa33e3f6f8b6482

    • SHA256

      e9cbaa1a70629e62990b92d586e3ea1f2cb1d82cd7c8ad17aeea24c9d1e09d99

    • SHA512

      bfd52162c9228e3ea9b51773f4dd7e4f7a1f25548a41a775c22adcd815b3de8766fb28b6e35dff85ca402700bd530a41920708d94e1361ec897d451d3236e6a7

    • SSDEEP

      12288:u4rXu0OVUf2Au746adZtIzkNDtZuFM9bT6f+N:1lOG2tJ89tMUI+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks