General

  • Target

    ecd1618b4843f004bb3bdb816e91d9be73a949ffd1efac3b55101e32ae5bdaa7

  • Size

    346KB

  • Sample

    241109-w41vzssmfl

  • MD5

    9a982ba15dd02368fae280c9f074ed18

  • SHA1

    4ced83906cb40ea03d0090b837a3d78892cc4099

  • SHA256

    ecd1618b4843f004bb3bdb816e91d9be73a949ffd1efac3b55101e32ae5bdaa7

  • SHA512

    15b39a1db237a3bfcc89fca5aec7a9701d0672d73fbffe553c6c480e3320d865f133f7358be279d885ac49d7cdbeec8e12095ebe5c22acda109655cd09dbac84

  • SSDEEP

    6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      ecd1618b4843f004bb3bdb816e91d9be73a949ffd1efac3b55101e32ae5bdaa7

    • Size

      346KB

    • MD5

      9a982ba15dd02368fae280c9f074ed18

    • SHA1

      4ced83906cb40ea03d0090b837a3d78892cc4099

    • SHA256

      ecd1618b4843f004bb3bdb816e91d9be73a949ffd1efac3b55101e32ae5bdaa7

    • SHA512

      15b39a1db237a3bfcc89fca5aec7a9701d0672d73fbffe553c6c480e3320d865f133f7358be279d885ac49d7cdbeec8e12095ebe5c22acda109655cd09dbac84

    • SSDEEP

      6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks