General

  • Target

    9e2d0de94941bea76e416c6374ca9a55fa6225027080778a3a9ed7275d982b09

  • Size

    422KB

  • Sample

    241109-1wd4gatbnb

  • MD5

    3c5b22c32d190309693c98acf59005ce

  • SHA1

    8f1b07b9f7e9a78febfac9ce4d46581d13e9c497

  • SHA256

    9e2d0de94941bea76e416c6374ca9a55fa6225027080778a3a9ed7275d982b09

  • SHA512

    97be5767343d431b3c40c6f13aef2a59373dc426b5625dcea94758f0882aaf5e72241599ab5b4a7ad7c09d84a368a2632f76bdfa0162918b7f62ee6edebef875

  • SSDEEP

    12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      9e2d0de94941bea76e416c6374ca9a55fa6225027080778a3a9ed7275d982b09

    • Size

      422KB

    • MD5

      3c5b22c32d190309693c98acf59005ce

    • SHA1

      8f1b07b9f7e9a78febfac9ce4d46581d13e9c497

    • SHA256

      9e2d0de94941bea76e416c6374ca9a55fa6225027080778a3a9ed7275d982b09

    • SHA512

      97be5767343d431b3c40c6f13aef2a59373dc426b5625dcea94758f0882aaf5e72241599ab5b4a7ad7c09d84a368a2632f76bdfa0162918b7f62ee6edebef875

    • SSDEEP

      12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks