General

  • Target

    2e7822fc238bf3ad122aa838b0ac7751fbcb9ba9f2447380b845a12c90f76d64

  • Size

    371KB

  • Sample

    241108-wl1r9swgqb

  • MD5

    b3c42f8424968a60cd4cf7cd2c3558ec

  • SHA1

    bce8a844b1aaad49d013e571dce151951f07ddd9

  • SHA256

    2e7822fc238bf3ad122aa838b0ac7751fbcb9ba9f2447380b845a12c90f76d64

  • SHA512

    f8bdcf61a78fb94fe80f64e732703b0cab1c60d411999a62a7c36632a5e568b356827e3df53709344dc5dc8f463b9e1dd50c2bef11e4b0645cf8addd8622b561

  • SSDEEP

    6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2e7822fc238bf3ad122aa838b0ac7751fbcb9ba9f2447380b845a12c90f76d64

    • Size

      371KB

    • MD5

      b3c42f8424968a60cd4cf7cd2c3558ec

    • SHA1

      bce8a844b1aaad49d013e571dce151951f07ddd9

    • SHA256

      2e7822fc238bf3ad122aa838b0ac7751fbcb9ba9f2447380b845a12c90f76d64

    • SHA512

      f8bdcf61a78fb94fe80f64e732703b0cab1c60d411999a62a7c36632a5e568b356827e3df53709344dc5dc8f463b9e1dd50c2bef11e4b0645cf8addd8622b561

    • SSDEEP

      6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks