General

  • Target

    8187a849981d9686a5b83928bcaa5fbd1bb6b7a6ff1f502d3ab6c63254a38720

  • Size

    297KB

  • Sample

    241109-p8h3eatnhx

  • MD5

    0ff3b63c77d9af77d4e25a55da03c980

  • SHA1

    61d71d1be064414c5a78b9e8044985dcb54d34d5

  • SHA256

    8187a849981d9686a5b83928bcaa5fbd1bb6b7a6ff1f502d3ab6c63254a38720

  • SHA512

    2934d157c1113657db7eadf068be27039e78de4ba826453b85fa69305f51267aac0de01a0e68977a663fcf11478d478b408c569b178bc6267d513e4110e298bd

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      8187a849981d9686a5b83928bcaa5fbd1bb6b7a6ff1f502d3ab6c63254a38720

    • Size

      297KB

    • MD5

      0ff3b63c77d9af77d4e25a55da03c980

    • SHA1

      61d71d1be064414c5a78b9e8044985dcb54d34d5

    • SHA256

      8187a849981d9686a5b83928bcaa5fbd1bb6b7a6ff1f502d3ab6c63254a38720

    • SHA512

      2934d157c1113657db7eadf068be27039e78de4ba826453b85fa69305f51267aac0de01a0e68977a663fcf11478d478b408c569b178bc6267d513e4110e298bd

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks