General

  • Target

    85c7f80affbf05b6bb8ae76e653818839c405ab78e3f65f78e6a955234e9ba66

  • Size

    428KB

  • Sample

    241109-fnrpdayaqd

  • MD5

    d6f9391d9e6c7794171a9c3615ac1911

  • SHA1

    3265176f36f29047a2e83dd1ff8afbc81ede0ef6

  • SHA256

    85c7f80affbf05b6bb8ae76e653818839c405ab78e3f65f78e6a955234e9ba66

  • SHA512

    bd05d121d23dd85c19f512091daa25c8dc79b4d8afcf75aac1fbfc86ebc26f7686c5eb0821a39be889ad40f1c6cc1cbe4e8dd925585d8b4cbe9e25aed801a3bb

  • SSDEEP

    6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      85c7f80affbf05b6bb8ae76e653818839c405ab78e3f65f78e6a955234e9ba66

    • Size

      428KB

    • MD5

      d6f9391d9e6c7794171a9c3615ac1911

    • SHA1

      3265176f36f29047a2e83dd1ff8afbc81ede0ef6

    • SHA256

      85c7f80affbf05b6bb8ae76e653818839c405ab78e3f65f78e6a955234e9ba66

    • SHA512

      bd05d121d23dd85c19f512091daa25c8dc79b4d8afcf75aac1fbfc86ebc26f7686c5eb0821a39be889ad40f1c6cc1cbe4e8dd925585d8b4cbe9e25aed801a3bb

    • SSDEEP

      6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks