General

  • Target

    00c76511029c1cf8df46d17ab8eddabc28f57c8cfb46eea7d84acf7f3f93229e

  • Size

    371KB

  • Sample

    241108-ynec6a1lhp

  • MD5

    476a6f8a7a973976a61976bd42222812

  • SHA1

    5af47871235f9431ab46a425327fc486fab7d381

  • SHA256

    00c76511029c1cf8df46d17ab8eddabc28f57c8cfb46eea7d84acf7f3f93229e

  • SHA512

    c54aae61b962bdfd789a01b64d884bc2c06e97fca82638ce75deb28588791e0c69cf19ce298d33b1963dab644e92f36d0b8c5a840f2b7ca619b500c21de3b070

  • SSDEEP

    6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      00c76511029c1cf8df46d17ab8eddabc28f57c8cfb46eea7d84acf7f3f93229e

    • Size

      371KB

    • MD5

      476a6f8a7a973976a61976bd42222812

    • SHA1

      5af47871235f9431ab46a425327fc486fab7d381

    • SHA256

      00c76511029c1cf8df46d17ab8eddabc28f57c8cfb46eea7d84acf7f3f93229e

    • SHA512

      c54aae61b962bdfd789a01b64d884bc2c06e97fca82638ce75deb28588791e0c69cf19ce298d33b1963dab644e92f36d0b8c5a840f2b7ca619b500c21de3b070

    • SSDEEP

      6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks