General

  • Target

    157f1d2df2de8d9d9aee86d8cd8a6ccc126fc39af5ae5a5503406577cf6c0040

  • Size

    297KB

  • Sample

    241109-dtq9pavrfs

  • MD5

    f4330da5d2391304e697a57a6c687f00

  • SHA1

    620e275db9cdfd193fed1eb232ff505c03f0aee7

  • SHA256

    157f1d2df2de8d9d9aee86d8cd8a6ccc126fc39af5ae5a5503406577cf6c0040

  • SHA512

    55e0a7b8d434cf4abdd9dd79fa24793972f1d7cebb00b935c5665f7f6d76504517a501b07347f5abaa5722abdd4cd151b2ff06103753584d0ed285f31eeb686a

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      157f1d2df2de8d9d9aee86d8cd8a6ccc126fc39af5ae5a5503406577cf6c0040

    • Size

      297KB

    • MD5

      f4330da5d2391304e697a57a6c687f00

    • SHA1

      620e275db9cdfd193fed1eb232ff505c03f0aee7

    • SHA256

      157f1d2df2de8d9d9aee86d8cd8a6ccc126fc39af5ae5a5503406577cf6c0040

    • SHA512

      55e0a7b8d434cf4abdd9dd79fa24793972f1d7cebb00b935c5665f7f6d76504517a501b07347f5abaa5722abdd4cd151b2ff06103753584d0ed285f31eeb686a

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks