General

  • Target

    960167be29ef4c3a6a36877e1e03f3c4398699bd2d13e9cd3869ab5df1d6b0aa

  • Size

    297KB

  • Sample

    241109-yntg3stnbq

  • MD5

    64c3a54133ff21769ebcb6f0cf4cfcbd

  • SHA1

    3f49def45b4f60d9263ada6fdfe6e2d195c1d090

  • SHA256

    960167be29ef4c3a6a36877e1e03f3c4398699bd2d13e9cd3869ab5df1d6b0aa

  • SHA512

    beaeee76b93970d1bf7f9b7236c9aff7aeaec3136812410ba73d4a0cd1dcda4dcc91ffa5b7a82d0e43393601c50516e8da830d52c1321d70a291165590d21cae

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      960167be29ef4c3a6a36877e1e03f3c4398699bd2d13e9cd3869ab5df1d6b0aa

    • Size

      297KB

    • MD5

      64c3a54133ff21769ebcb6f0cf4cfcbd

    • SHA1

      3f49def45b4f60d9263ada6fdfe6e2d195c1d090

    • SHA256

      960167be29ef4c3a6a36877e1e03f3c4398699bd2d13e9cd3869ab5df1d6b0aa

    • SHA512

      beaeee76b93970d1bf7f9b7236c9aff7aeaec3136812410ba73d4a0cd1dcda4dcc91ffa5b7a82d0e43393601c50516e8da830d52c1321d70a291165590d21cae

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks