General

  • Target

    0e9d81884a52f1282b8054d84531d02360c2a64a9829b7f412b4ebed5b4e011d

  • Size

    371KB

  • Sample

    241109-15vgtawnbm

  • MD5

    692f2c2a82c0f48b2f812818c405d05a

  • SHA1

    317829ab4360bdddd89184eb5a805b823d6a153d

  • SHA256

    0e9d81884a52f1282b8054d84531d02360c2a64a9829b7f412b4ebed5b4e011d

  • SHA512

    7ce076c4a3f009b4c8f11de26d91b1bd985b3380a79ef8f3fb7a5d479492d5a8567d75ea169bc6b28e69fe9cd7d4866c4059c1386c379cfd15cf424fc5a76891

  • SSDEEP

    6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      0e9d81884a52f1282b8054d84531d02360c2a64a9829b7f412b4ebed5b4e011d

    • Size

      371KB

    • MD5

      692f2c2a82c0f48b2f812818c405d05a

    • SHA1

      317829ab4360bdddd89184eb5a805b823d6a153d

    • SHA256

      0e9d81884a52f1282b8054d84531d02360c2a64a9829b7f412b4ebed5b4e011d

    • SHA512

      7ce076c4a3f009b4c8f11de26d91b1bd985b3380a79ef8f3fb7a5d479492d5a8567d75ea169bc6b28e69fe9cd7d4866c4059c1386c379cfd15cf424fc5a76891

    • SSDEEP

      6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks