General

  • Target

    7a20d33e4c53a7715109ed24574814f7cb4419fc76906d1ac215fa5459318810

  • Size

    297KB

  • Sample

    241109-xzwk5szhje

  • MD5

    281a00c6abc43522539b6e69fb294291

  • SHA1

    b6c936479736ba13c49bf53aa422c032ac0bef02

  • SHA256

    7a20d33e4c53a7715109ed24574814f7cb4419fc76906d1ac215fa5459318810

  • SHA512

    04f104b26c160c64ed9b4272fb8abe2dff40c2daf4449e3f577342e59f50a1db6a3ed2d6f8c8538d4390507a4c93d3968adc0a91f103f1cfb0cc5da9c9e6bbe5

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7a20d33e4c53a7715109ed24574814f7cb4419fc76906d1ac215fa5459318810

    • Size

      297KB

    • MD5

      281a00c6abc43522539b6e69fb294291

    • SHA1

      b6c936479736ba13c49bf53aa422c032ac0bef02

    • SHA256

      7a20d33e4c53a7715109ed24574814f7cb4419fc76906d1ac215fa5459318810

    • SHA512

      04f104b26c160c64ed9b4272fb8abe2dff40c2daf4449e3f577342e59f50a1db6a3ed2d6f8c8538d4390507a4c93d3968adc0a91f103f1cfb0cc5da9c9e6bbe5

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks