General

  • Target

    5afcae6dcc1ba77d3877949dbcd0e7d9660fb3db2d2827e48eb2f7cafe632e8d

  • Size

    371KB

  • Sample

    241109-mrzmqawjgl

  • MD5

    7544155533e640ed31a5f3e3237e74d6

  • SHA1

    cafb136172417133cbdaacff430221a3b955d85c

  • SHA256

    5afcae6dcc1ba77d3877949dbcd0e7d9660fb3db2d2827e48eb2f7cafe632e8d

  • SHA512

    29c09d7e3abd978791ab6ecea40a2674fa4aafb6adc93444cd44bf392087aa165c872138952915a3c4a0e172d00cef2e35f9d45e6d73fc6ba4937f776cd0f269

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      5afcae6dcc1ba77d3877949dbcd0e7d9660fb3db2d2827e48eb2f7cafe632e8d

    • Size

      371KB

    • MD5

      7544155533e640ed31a5f3e3237e74d6

    • SHA1

      cafb136172417133cbdaacff430221a3b955d85c

    • SHA256

      5afcae6dcc1ba77d3877949dbcd0e7d9660fb3db2d2827e48eb2f7cafe632e8d

    • SHA512

      29c09d7e3abd978791ab6ecea40a2674fa4aafb6adc93444cd44bf392087aa165c872138952915a3c4a0e172d00cef2e35f9d45e6d73fc6ba4937f776cd0f269

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks