General

  • Target

    2ed7d39facf01bdde26f910a9cf8f0dd6b44d182e5c69499e930fb39a1ab7994

  • Size

    370KB

  • Sample

    241109-b9x13atnbs

  • MD5

    1d052c821c05ebb6ab9d0fe50f147189

  • SHA1

    6ce05fdeea0b99f0acb58e1a6d67ad3be21a673b

  • SHA256

    2ed7d39facf01bdde26f910a9cf8f0dd6b44d182e5c69499e930fb39a1ab7994

  • SHA512

    0f94d9899ddcc42a77003f6796d0d6a3357c23fb4e161243ee8d5090178d6248a0216a8885ff4961f7e7f21d06586fa4e8eabfb100b2c7a81f0237e99da17066

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2ed7d39facf01bdde26f910a9cf8f0dd6b44d182e5c69499e930fb39a1ab7994

    • Size

      370KB

    • MD5

      1d052c821c05ebb6ab9d0fe50f147189

    • SHA1

      6ce05fdeea0b99f0acb58e1a6d67ad3be21a673b

    • SHA256

      2ed7d39facf01bdde26f910a9cf8f0dd6b44d182e5c69499e930fb39a1ab7994

    • SHA512

      0f94d9899ddcc42a77003f6796d0d6a3357c23fb4e161243ee8d5090178d6248a0216a8885ff4961f7e7f21d06586fa4e8eabfb100b2c7a81f0237e99da17066

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks