General

  • Target

    afd65b7ffc2911220f301883e8a938aa8949f353da53599478643cd24250aa06

  • Size

    438KB

  • Sample

    241108-xzmy1azqgm

  • MD5

    bf0ac86c23d4d4369d89359e6d22e893

  • SHA1

    613c58f08b42fde817135086da441e01ec808ffc

  • SHA256

    afd65b7ffc2911220f301883e8a938aa8949f353da53599478643cd24250aa06

  • SHA512

    a16aa9e9839505faed8f5d26265fc918ce073e29edcab042112682b06dc9592a7aabbd4d0ef7b0265882be3ced7fc2748850ab62847dea38620e2a4e7c8f6309

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      afd65b7ffc2911220f301883e8a938aa8949f353da53599478643cd24250aa06

    • Size

      438KB

    • MD5

      bf0ac86c23d4d4369d89359e6d22e893

    • SHA1

      613c58f08b42fde817135086da441e01ec808ffc

    • SHA256

      afd65b7ffc2911220f301883e8a938aa8949f353da53599478643cd24250aa06

    • SHA512

      a16aa9e9839505faed8f5d26265fc918ce073e29edcab042112682b06dc9592a7aabbd4d0ef7b0265882be3ced7fc2748850ab62847dea38620e2a4e7c8f6309

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks