General

  • Target

    2af74f38cedaee229a9c60cc136dade0f829b292082c5710674e4f2b04f4b8a1

  • Size

    422KB

  • Sample

    241109-fd7mvaxhma

  • MD5

    460e7de02664decaaaea5acc8b2c4640

  • SHA1

    80a6a8e81c8e7721249cd2463103f820e1d59afb

  • SHA256

    2af74f38cedaee229a9c60cc136dade0f829b292082c5710674e4f2b04f4b8a1

  • SHA512

    00df968c66319a5b5ef9498872eba59555981a182f5300c2043e1114ca8085856bc225cc63c0262ed060ba401a610230cef02b590e5835385c4fad3f6e36e19b

  • SSDEEP

    12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2af74f38cedaee229a9c60cc136dade0f829b292082c5710674e4f2b04f4b8a1

    • Size

      422KB

    • MD5

      460e7de02664decaaaea5acc8b2c4640

    • SHA1

      80a6a8e81c8e7721249cd2463103f820e1d59afb

    • SHA256

      2af74f38cedaee229a9c60cc136dade0f829b292082c5710674e4f2b04f4b8a1

    • SHA512

      00df968c66319a5b5ef9498872eba59555981a182f5300c2043e1114ca8085856bc225cc63c0262ed060ba401a610230cef02b590e5835385c4fad3f6e36e19b

    • SSDEEP

      12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks