General

  • Target

    9cb757a42a52b2cd046fecbff6ed98094ef998bdeb39ef05f53811d4e466e3dc

  • Size

    422KB

  • Sample

    241109-d3dd7awkcv

  • MD5

    469d892e4ce66616beedba30721c2119

  • SHA1

    5354f3ec24c03444355929ea2de3d11e2b5a0813

  • SHA256

    9cb757a42a52b2cd046fecbff6ed98094ef998bdeb39ef05f53811d4e466e3dc

  • SHA512

    346a8dda551458fd8969fe8b4c90c803c571fbd1ee4666cb948a7a7eba30fe0c00c0f4bc59a7492252794a23192c53b0ae16ee2a261a4964388fc02c3165dfda

  • SSDEEP

    12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      9cb757a42a52b2cd046fecbff6ed98094ef998bdeb39ef05f53811d4e466e3dc

    • Size

      422KB

    • MD5

      469d892e4ce66616beedba30721c2119

    • SHA1

      5354f3ec24c03444355929ea2de3d11e2b5a0813

    • SHA256

      9cb757a42a52b2cd046fecbff6ed98094ef998bdeb39ef05f53811d4e466e3dc

    • SHA512

      346a8dda551458fd8969fe8b4c90c803c571fbd1ee4666cb948a7a7eba30fe0c00c0f4bc59a7492252794a23192c53b0ae16ee2a261a4964388fc02c3165dfda

    • SSDEEP

      12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks