General

  • Target

    3e69271182fd24d7930729f01531cb6131f4275fc9c880a5f48dd4ad27da2954

  • Size

    371KB

  • Sample

    241108-xfhvyazmep

  • MD5

    6413b5e1dd9e6262c61d045dff640cb6

  • SHA1

    5e275644898ee857a8c100de256180789b30cefd

  • SHA256

    3e69271182fd24d7930729f01531cb6131f4275fc9c880a5f48dd4ad27da2954

  • SHA512

    862bcee7bfd25cbf365f11eb48000e84f760558442ae1ebf35a9a2ec095930e67e6023e128ce86b1687d8784936312fecd2b870cfb32096be6a9cd0298528f95

  • SSDEEP

    6144:OCXITG+urF+W2/cH8J6yr/bAxgPLrk1sx5b7ITsqXigaXwVfZ:OCXITDDWmx6BOj8O17R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      3e69271182fd24d7930729f01531cb6131f4275fc9c880a5f48dd4ad27da2954

    • Size

      371KB

    • MD5

      6413b5e1dd9e6262c61d045dff640cb6

    • SHA1

      5e275644898ee857a8c100de256180789b30cefd

    • SHA256

      3e69271182fd24d7930729f01531cb6131f4275fc9c880a5f48dd4ad27da2954

    • SHA512

      862bcee7bfd25cbf365f11eb48000e84f760558442ae1ebf35a9a2ec095930e67e6023e128ce86b1687d8784936312fecd2b870cfb32096be6a9cd0298528f95

    • SSDEEP

      6144:OCXITG+urF+W2/cH8J6yr/bAxgPLrk1sx5b7ITsqXigaXwVfZ:OCXITDDWmx6BOj8O17R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks