General

  • Target

    882d4d67ead7a87bda25bac536fdc4a2e071a4aaf274187c71fce5461182fbe2

  • Size

    297KB

  • Sample

    241108-w8lxmawpay

  • MD5

    c8f25b33426cba60081fc3ed3175b04a

  • SHA1

    b2991da10b26cea93164452f6afca858c8c162a9

  • SHA256

    882d4d67ead7a87bda25bac536fdc4a2e071a4aaf274187c71fce5461182fbe2

  • SHA512

    b34496fed940f225dd5adf32221ed54dd9a163e1dfc80a0859dd8f0d0c12e7886eba5fce81147e9f09cb9bf64ec77909099657ed88ade5fb8c66ea7934e47093

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      882d4d67ead7a87bda25bac536fdc4a2e071a4aaf274187c71fce5461182fbe2

    • Size

      297KB

    • MD5

      c8f25b33426cba60081fc3ed3175b04a

    • SHA1

      b2991da10b26cea93164452f6afca858c8c162a9

    • SHA256

      882d4d67ead7a87bda25bac536fdc4a2e071a4aaf274187c71fce5461182fbe2

    • SHA512

      b34496fed940f225dd5adf32221ed54dd9a163e1dfc80a0859dd8f0d0c12e7886eba5fce81147e9f09cb9bf64ec77909099657ed88ade5fb8c66ea7934e47093

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks