General

  • Target

    93160268ca1e4f4b9ff56f44f072e78925b1be79111ef039c06860d863347284

  • Size

    422KB

  • Sample

    241109-c2fx9avhra

  • MD5

    edc1c0de603ca16f95bc7aeb472cd71c

  • SHA1

    5975e4b23f60d7eb30b6928b9d3184e1cf98fb6c

  • SHA256

    93160268ca1e4f4b9ff56f44f072e78925b1be79111ef039c06860d863347284

  • SHA512

    790c5cf00f0d293917565b521791cc974319e8b49c19c7a421e586354a8c55c60f08b95ca8d1d47baf28585974aa45357b655b27f7318807e6e02225eaf56ce7

  • SSDEEP

    12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      93160268ca1e4f4b9ff56f44f072e78925b1be79111ef039c06860d863347284

    • Size

      422KB

    • MD5

      edc1c0de603ca16f95bc7aeb472cd71c

    • SHA1

      5975e4b23f60d7eb30b6928b9d3184e1cf98fb6c

    • SHA256

      93160268ca1e4f4b9ff56f44f072e78925b1be79111ef039c06860d863347284

    • SHA512

      790c5cf00f0d293917565b521791cc974319e8b49c19c7a421e586354a8c55c60f08b95ca8d1d47baf28585974aa45357b655b27f7318807e6e02225eaf56ce7

    • SSDEEP

      12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks