General

  • Target

    866762990d74f59637634ed6db506c3fc304342544105b7c0047181aa6e29825

  • Size

    297KB

  • Sample

    241108-xmrfnawrb1

  • MD5

    c2f1894609f27383c4ae44e4f0e75b49

  • SHA1

    02ffb0338e6da066526e864565fb2bb3294d736d

  • SHA256

    866762990d74f59637634ed6db506c3fc304342544105b7c0047181aa6e29825

  • SHA512

    f2f622e17a46e46b0c3e60096aa77d2f2af2016603ebf0eb3866485f4fc426e8238582057add3f3ad9378d6ef15a4d702e555792b54f3e4570d743e2277cb43c

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      866762990d74f59637634ed6db506c3fc304342544105b7c0047181aa6e29825

    • Size

      297KB

    • MD5

      c2f1894609f27383c4ae44e4f0e75b49

    • SHA1

      02ffb0338e6da066526e864565fb2bb3294d736d

    • SHA256

      866762990d74f59637634ed6db506c3fc304342544105b7c0047181aa6e29825

    • SHA512

      f2f622e17a46e46b0c3e60096aa77d2f2af2016603ebf0eb3866485f4fc426e8238582057add3f3ad9378d6ef15a4d702e555792b54f3e4570d743e2277cb43c

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks