General

  • Target

    43a57e15606ce40aa590e7474c19717f357198e420a0a08ceb3f39e7771a9fb6

  • Size

    427KB

  • Sample

    241109-ef443awnax

  • MD5

    7c1f12facbc1d53d40591809d8bbedc2

  • SHA1

    68395ea5a5163ec1cfe2387e4cdfc2f1cf21561f

  • SHA256

    43a57e15606ce40aa590e7474c19717f357198e420a0a08ceb3f39e7771a9fb6

  • SHA512

    b7d56da9bf0ad213b1f65e5dd60af2fd4efbf59ac965051556971106744b52b24895083b3849f25c8cd58cb5fd2156fb670e492dffabc1d3a5ff60214771d652

  • SSDEEP

    6144:XxnVbTjtyULhQVfiYUbqBAXdfWe22Yi5/L/ngOBWJfr1PqaRJ0:XxVbsgcinqBAXNT22Yi5/L/n6r1Pq

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      43a57e15606ce40aa590e7474c19717f357198e420a0a08ceb3f39e7771a9fb6

    • Size

      427KB

    • MD5

      7c1f12facbc1d53d40591809d8bbedc2

    • SHA1

      68395ea5a5163ec1cfe2387e4cdfc2f1cf21561f

    • SHA256

      43a57e15606ce40aa590e7474c19717f357198e420a0a08ceb3f39e7771a9fb6

    • SHA512

      b7d56da9bf0ad213b1f65e5dd60af2fd4efbf59ac965051556971106744b52b24895083b3849f25c8cd58cb5fd2156fb670e492dffabc1d3a5ff60214771d652

    • SSDEEP

      6144:XxnVbTjtyULhQVfiYUbqBAXdfWe22Yi5/L/ngOBWJfr1PqaRJ0:XxVbsgcinqBAXNT22Yi5/L/n6r1Pq

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks