General

  • Target

    d4b699b5c498c01dddc9acb538b4877b69ce864a1253a26255545b3515d0a151

  • Size

    438KB

  • Sample

    241109-favtwaxgrr

  • MD5

    58acebc4d4f293140826689bb6342684

  • SHA1

    f86a67d737401b4ea0dae6998bdb2c120450d1f8

  • SHA256

    d4b699b5c498c01dddc9acb538b4877b69ce864a1253a26255545b3515d0a151

  • SHA512

    d90e08d491a21c0a0d55f7a5eff0eec9a230ed4218c98d450cafb8475ee70a1b246bf525e533589de338d53e540dc2ae85cbc9fb91f4d58ab58aaddbcfa3ba97

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d4b699b5c498c01dddc9acb538b4877b69ce864a1253a26255545b3515d0a151

    • Size

      438KB

    • MD5

      58acebc4d4f293140826689bb6342684

    • SHA1

      f86a67d737401b4ea0dae6998bdb2c120450d1f8

    • SHA256

      d4b699b5c498c01dddc9acb538b4877b69ce864a1253a26255545b3515d0a151

    • SHA512

      d90e08d491a21c0a0d55f7a5eff0eec9a230ed4218c98d450cafb8475ee70a1b246bf525e533589de338d53e540dc2ae85cbc9fb91f4d58ab58aaddbcfa3ba97

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks