General

  • Target

    35dada9a4cfe44d1eb7f959f44474427b6dff10630e2fc4897770b0cd4bd15ab

  • Size

    297KB

  • Sample

    241109-3vcv5axpap

  • MD5

    46efb5c6fc0fcaf7b52a859fc60b1d79

  • SHA1

    9ac8c5ad87a75ca7b1f8fed46d0f77dd2aeabe30

  • SHA256

    35dada9a4cfe44d1eb7f959f44474427b6dff10630e2fc4897770b0cd4bd15ab

  • SHA512

    e958f6a253d459bb374586b63208e17776049bdf1802e21efded42fbadcd5fa572fe1b67d848a27b9c9cb446420b87680c09b96b3fbd46dd5d80587b0d8f5b23

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      35dada9a4cfe44d1eb7f959f44474427b6dff10630e2fc4897770b0cd4bd15ab

    • Size

      297KB

    • MD5

      46efb5c6fc0fcaf7b52a859fc60b1d79

    • SHA1

      9ac8c5ad87a75ca7b1f8fed46d0f77dd2aeabe30

    • SHA256

      35dada9a4cfe44d1eb7f959f44474427b6dff10630e2fc4897770b0cd4bd15ab

    • SHA512

      e958f6a253d459bb374586b63208e17776049bdf1802e21efded42fbadcd5fa572fe1b67d848a27b9c9cb446420b87680c09b96b3fbd46dd5d80587b0d8f5b23

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks