General

  • Target

    b3296b1069f933d6a202cc226a1b60c4f589d275440e858f555e8ee902a1d4bd

  • Size

    438KB

  • Sample

    241109-zpf4tavman

  • MD5

    868c04a979be13d56f54e3611e4a75e5

  • SHA1

    4fb04a600bdd93bcc0b63376612df6a5ebf15438

  • SHA256

    b3296b1069f933d6a202cc226a1b60c4f589d275440e858f555e8ee902a1d4bd

  • SHA512

    3664b5858429790ccb18e8f50198e5c610e1a86d79aa1cdafee907c9833604c895862641a1a86af5e4827b5685d754c056bc12bce1fe7a5af5aa0522b9e2f4b1

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      b3296b1069f933d6a202cc226a1b60c4f589d275440e858f555e8ee902a1d4bd

    • Size

      438KB

    • MD5

      868c04a979be13d56f54e3611e4a75e5

    • SHA1

      4fb04a600bdd93bcc0b63376612df6a5ebf15438

    • SHA256

      b3296b1069f933d6a202cc226a1b60c4f589d275440e858f555e8ee902a1d4bd

    • SHA512

      3664b5858429790ccb18e8f50198e5c610e1a86d79aa1cdafee907c9833604c895862641a1a86af5e4827b5685d754c056bc12bce1fe7a5af5aa0522b9e2f4b1

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks