General

  • Target

    0fcf75f8cb14b9d8c70c353c2b8bc458a2b350be9a46b8b21892ce65084bf08f

  • Size

    371KB

  • Sample

    241108-wcyasaypfr

  • MD5

    3150a3bc5f9c59450d020226d74da356

  • SHA1

    7dfdfed58f30f672086034ebc78db6daf3649e98

  • SHA256

    0fcf75f8cb14b9d8c70c353c2b8bc458a2b350be9a46b8b21892ce65084bf08f

  • SHA512

    9095d6971525190f4e1b765f674ae393f092d785bfd61a35b19b10711176fb1e9df26fc9724de998c72247427b9a376bf09a920880d43025a0f9df2f0155c739

  • SSDEEP

    6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      0fcf75f8cb14b9d8c70c353c2b8bc458a2b350be9a46b8b21892ce65084bf08f

    • Size

      371KB

    • MD5

      3150a3bc5f9c59450d020226d74da356

    • SHA1

      7dfdfed58f30f672086034ebc78db6daf3649e98

    • SHA256

      0fcf75f8cb14b9d8c70c353c2b8bc458a2b350be9a46b8b21892ce65084bf08f

    • SHA512

      9095d6971525190f4e1b765f674ae393f092d785bfd61a35b19b10711176fb1e9df26fc9724de998c72247427b9a376bf09a920880d43025a0f9df2f0155c739

    • SSDEEP

      6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks