General

  • Target

    2f76c9c187fa86bc8a6c3cd352844fcd2983cd2380e59203da2cb43b74da426d

  • Size

    297KB

  • Sample

    241109-l829havqap

  • MD5

    c6a086c61c04768c1e182275a27fcde5

  • SHA1

    7ef5e57b7179a238e500e6df1eaebed920176842

  • SHA256

    2f76c9c187fa86bc8a6c3cd352844fcd2983cd2380e59203da2cb43b74da426d

  • SHA512

    ebde13098fccc20e302718372b20a1f6cbc3c3a060350a50b0413028038b323335c46131b42e6bc310ce616054004b52fe4233aca6b78900b43b284f7adeb2f0

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2f76c9c187fa86bc8a6c3cd352844fcd2983cd2380e59203da2cb43b74da426d

    • Size

      297KB

    • MD5

      c6a086c61c04768c1e182275a27fcde5

    • SHA1

      7ef5e57b7179a238e500e6df1eaebed920176842

    • SHA256

      2f76c9c187fa86bc8a6c3cd352844fcd2983cd2380e59203da2cb43b74da426d

    • SHA512

      ebde13098fccc20e302718372b20a1f6cbc3c3a060350a50b0413028038b323335c46131b42e6bc310ce616054004b52fe4233aca6b78900b43b284f7adeb2f0

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks