General

  • Target

    0f596c32a2aecc645e70222dde4647f99180acac0bd84ab0f388f5e951d0ca92

  • Size

    438KB

  • Sample

    241109-qab2watpby

  • MD5

    65ce68c18699c7a7bfac2e8421e6d590

  • SHA1

    88b8e517091f9ffbcf20975176ef75a6f5490a3f

  • SHA256

    0f596c32a2aecc645e70222dde4647f99180acac0bd84ab0f388f5e951d0ca92

  • SHA512

    c8412ae0106d8f75cece39663a26c4c18b00ce1e00d480e1e2151b17d8abb24c6a873b5bad89ba24c96d0cb1ec6744a6ae1885c9db8f59981adae13671781128

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      0f596c32a2aecc645e70222dde4647f99180acac0bd84ab0f388f5e951d0ca92

    • Size

      438KB

    • MD5

      65ce68c18699c7a7bfac2e8421e6d590

    • SHA1

      88b8e517091f9ffbcf20975176ef75a6f5490a3f

    • SHA256

      0f596c32a2aecc645e70222dde4647f99180acac0bd84ab0f388f5e951d0ca92

    • SHA512

      c8412ae0106d8f75cece39663a26c4c18b00ce1e00d480e1e2151b17d8abb24c6a873b5bad89ba24c96d0cb1ec6744a6ae1885c9db8f59981adae13671781128

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks