General

  • Target

    f0cc371c5f6dd6929df492b4cfc8f1b13b050e503a97c1581899abb8d7d1fd0a

  • Size

    371KB

  • Sample

    241109-ezqe1sxepg

  • MD5

    7ffabc257adb8f291bb5ece8e9ed5baf

  • SHA1

    32989fe5955c10dd6f4d7e5b5b0b31efa24f0c2a

  • SHA256

    f0cc371c5f6dd6929df492b4cfc8f1b13b050e503a97c1581899abb8d7d1fd0a

  • SHA512

    787ea6ff23c8529dbd937de9a60af8e033c45bdfb8b76e97b2d7b361b78a98095f1c01cf6b8897d3c115562d83ebfd4a9ee3a6102e0987f9f160a17e14393da3

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f0cc371c5f6dd6929df492b4cfc8f1b13b050e503a97c1581899abb8d7d1fd0a

    • Size

      371KB

    • MD5

      7ffabc257adb8f291bb5ece8e9ed5baf

    • SHA1

      32989fe5955c10dd6f4d7e5b5b0b31efa24f0c2a

    • SHA256

      f0cc371c5f6dd6929df492b4cfc8f1b13b050e503a97c1581899abb8d7d1fd0a

    • SHA512

      787ea6ff23c8529dbd937de9a60af8e033c45bdfb8b76e97b2d7b361b78a98095f1c01cf6b8897d3c115562d83ebfd4a9ee3a6102e0987f9f160a17e14393da3

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks