General

  • Target

    2f495ec6f9d313f3fe833a785ce250e04e97d0bc654882d963e99b5a34964a21

  • Size

    297KB

  • Sample

    241109-tgfv7awpe1

  • MD5

    b00bbd15577559484c6a3ac093ceb3f1

  • SHA1

    b5dc8af829f8aa7096a18b244ffbace12adcbbd2

  • SHA256

    2f495ec6f9d313f3fe833a785ce250e04e97d0bc654882d963e99b5a34964a21

  • SHA512

    9ece887d50e2076a71962ba969405e4b8e3e2098884e8cacd2c571b2aa5c41c6b03a501fb9a44791f9d52a8ab3046c6344e508a863d7ba7f6202d3e57cc0bdb5

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2f495ec6f9d313f3fe833a785ce250e04e97d0bc654882d963e99b5a34964a21

    • Size

      297KB

    • MD5

      b00bbd15577559484c6a3ac093ceb3f1

    • SHA1

      b5dc8af829f8aa7096a18b244ffbace12adcbbd2

    • SHA256

      2f495ec6f9d313f3fe833a785ce250e04e97d0bc654882d963e99b5a34964a21

    • SHA512

      9ece887d50e2076a71962ba969405e4b8e3e2098884e8cacd2c571b2aa5c41c6b03a501fb9a44791f9d52a8ab3046c6344e508a863d7ba7f6202d3e57cc0bdb5

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks