General

  • Target

    a86b68432cafb7fb77270a2b3870d7d749b6a0b3aceeebf0c47502dade6f2b24

  • Size

    370KB

  • Sample

    241109-wsl8fszaqe

  • MD5

    f0861f60d497c844ba13763ef40b854c

  • SHA1

    ddd0ff245f5632b00379c9970516d2ff0295f0e5

  • SHA256

    a86b68432cafb7fb77270a2b3870d7d749b6a0b3aceeebf0c47502dade6f2b24

  • SHA512

    c36ce988d6fdde4fff45b79d1c0b21a071574ab799d71b9583c5966c461d39ba981dc3e1d7b408cc57f8d0101217d9ac5070b8e980e43ad8d6efce8a78f51484

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a86b68432cafb7fb77270a2b3870d7d749b6a0b3aceeebf0c47502dade6f2b24

    • Size

      370KB

    • MD5

      f0861f60d497c844ba13763ef40b854c

    • SHA1

      ddd0ff245f5632b00379c9970516d2ff0295f0e5

    • SHA256

      a86b68432cafb7fb77270a2b3870d7d749b6a0b3aceeebf0c47502dade6f2b24

    • SHA512

      c36ce988d6fdde4fff45b79d1c0b21a071574ab799d71b9583c5966c461d39ba981dc3e1d7b408cc57f8d0101217d9ac5070b8e980e43ad8d6efce8a78f51484

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks