General

  • Target

    a349c5300605f619df52ee6c325b84ec1e8bfdbbf4b8490a8e6dbedf2d023a3d

  • Size

    371KB

  • Sample

    241109-mnpncasjgs

  • MD5

    6dc85c0e9e3e05d098b8b9bc5dff7c44

  • SHA1

    95e185a23c4834d2c9ddcf303f661cd780c2a701

  • SHA256

    a349c5300605f619df52ee6c325b84ec1e8bfdbbf4b8490a8e6dbedf2d023a3d

  • SHA512

    d13ff29dad9425feaca9c26f238fa716d01c1cc6ab9b00aeb13213fa77b9a76e11f4da57f375b24926cfe71be5ad1b6e1ae218cdb318c52068e63193b05f5eb6

  • SSDEEP

    6144:OCXITG+urF+W2/cH8J6yr/bAxgPLrk1sx5b7ITsqXigaXwVfZ:OCXITDDWmx6BOj8O17R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a349c5300605f619df52ee6c325b84ec1e8bfdbbf4b8490a8e6dbedf2d023a3d

    • Size

      371KB

    • MD5

      6dc85c0e9e3e05d098b8b9bc5dff7c44

    • SHA1

      95e185a23c4834d2c9ddcf303f661cd780c2a701

    • SHA256

      a349c5300605f619df52ee6c325b84ec1e8bfdbbf4b8490a8e6dbedf2d023a3d

    • SHA512

      d13ff29dad9425feaca9c26f238fa716d01c1cc6ab9b00aeb13213fa77b9a76e11f4da57f375b24926cfe71be5ad1b6e1ae218cdb318c52068e63193b05f5eb6

    • SSDEEP

      6144:OCXITG+urF+W2/cH8J6yr/bAxgPLrk1sx5b7ITsqXigaXwVfZ:OCXITDDWmx6BOj8O17R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks