General

  • Target

    cc19e75d9adb701b105bada6bf0da11787c75cae5378b260541af2320286ee1a

  • Size

    438KB

  • Sample

    241109-171fvasngs

  • MD5

    4efc364e47666d05b08bc7f0234b88ee

  • SHA1

    c140ee4f9be010bd32f95cf05a696a90c79f95d4

  • SHA256

    cc19e75d9adb701b105bada6bf0da11787c75cae5378b260541af2320286ee1a

  • SHA512

    2c0662147ec2fd41aba9a7c13ab8ac7e4eceebf84a8ffc4499b0c2fd247bb5b5b56e1b6543866360edf4f1863b5170e13f93f18a4ac68f60e566172d19f7f1ab

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      cc19e75d9adb701b105bada6bf0da11787c75cae5378b260541af2320286ee1a

    • Size

      438KB

    • MD5

      4efc364e47666d05b08bc7f0234b88ee

    • SHA1

      c140ee4f9be010bd32f95cf05a696a90c79f95d4

    • SHA256

      cc19e75d9adb701b105bada6bf0da11787c75cae5378b260541af2320286ee1a

    • SHA512

      2c0662147ec2fd41aba9a7c13ab8ac7e4eceebf84a8ffc4499b0c2fd247bb5b5b56e1b6543866360edf4f1863b5170e13f93f18a4ac68f60e566172d19f7f1ab

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks