General

  • Target

    06dd26c48150a921c1cfd6fe0f87809adeff996c2c40921a899cc64f7eeb16a0

  • Size

    371KB

  • Sample

    241110-1cwt6swcmg

  • MD5

    e05fc827a955ddbf677b1a06c391d08c

  • SHA1

    004f972f6ba640b995d05ee27b12e84b6da99677

  • SHA256

    06dd26c48150a921c1cfd6fe0f87809adeff996c2c40921a899cc64f7eeb16a0

  • SHA512

    0cfb7ac08bb1e016c438590a97853375d04bbc93cab3a4b9ffc8144ef19538bbc1047045a3f1bb347b9e9588d1c2cb147ce3b835e0ae026c91a576e062e52362

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      06dd26c48150a921c1cfd6fe0f87809adeff996c2c40921a899cc64f7eeb16a0

    • Size

      371KB

    • MD5

      e05fc827a955ddbf677b1a06c391d08c

    • SHA1

      004f972f6ba640b995d05ee27b12e84b6da99677

    • SHA256

      06dd26c48150a921c1cfd6fe0f87809adeff996c2c40921a899cc64f7eeb16a0

    • SHA512

      0cfb7ac08bb1e016c438590a97853375d04bbc93cab3a4b9ffc8144ef19538bbc1047045a3f1bb347b9e9588d1c2cb147ce3b835e0ae026c91a576e062e52362

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks