General

  • Target

    6ca612daa830d3aaa67ee56dabc322cb6e0d87838d0110ccfde5c9213f870a79

  • Size

    298KB

  • Sample

    241108-z2twfasmhk

  • MD5

    7f16097836d857c20153a31b585bd0e2

  • SHA1

    3586db1314c5f03dc1806891f2350f83d445e221

  • SHA256

    6ca612daa830d3aaa67ee56dabc322cb6e0d87838d0110ccfde5c9213f870a79

  • SHA512

    30f2506259c19eb6e4d5d8284352b70d0086bc9a739572fb4b15d35f1a9cc29a3963d842b57892b57634ef86db8c6e8e975d7924a1c97284ee9006cee765f4d2

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6ca612daa830d3aaa67ee56dabc322cb6e0d87838d0110ccfde5c9213f870a79

    • Size

      298KB

    • MD5

      7f16097836d857c20153a31b585bd0e2

    • SHA1

      3586db1314c5f03dc1806891f2350f83d445e221

    • SHA256

      6ca612daa830d3aaa67ee56dabc322cb6e0d87838d0110ccfde5c9213f870a79

    • SHA512

      30f2506259c19eb6e4d5d8284352b70d0086bc9a739572fb4b15d35f1a9cc29a3963d842b57892b57634ef86db8c6e8e975d7924a1c97284ee9006cee765f4d2

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks