General

  • Target

    a1c17d9bd47e110a08223b7d57368e727cc17c15417f1ef8b62645eece1aef54

  • Size

    298KB

  • Sample

    241109-hw34gsspgr

  • MD5

    7a309b4d471052d9defb12358c65f59f

  • SHA1

    ac8c0a0882de1bc9d28e5c608ff7ae268f0f9212

  • SHA256

    a1c17d9bd47e110a08223b7d57368e727cc17c15417f1ef8b62645eece1aef54

  • SHA512

    fa9fdebc869f5b0486bb62f586532325378ab3de246896997543d8588eecdf3ce836d05740ccfad792065e645f9eb2e019e1e24f487cabd9b25c06ec9f6bcc95

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a1c17d9bd47e110a08223b7d57368e727cc17c15417f1ef8b62645eece1aef54

    • Size

      298KB

    • MD5

      7a309b4d471052d9defb12358c65f59f

    • SHA1

      ac8c0a0882de1bc9d28e5c608ff7ae268f0f9212

    • SHA256

      a1c17d9bd47e110a08223b7d57368e727cc17c15417f1ef8b62645eece1aef54

    • SHA512

      fa9fdebc869f5b0486bb62f586532325378ab3de246896997543d8588eecdf3ce836d05740ccfad792065e645f9eb2e019e1e24f487cabd9b25c06ec9f6bcc95

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks