General

  • Target

    06bfa86b0b341306bcf87f4777f133e30c1772268161ad4ee06273af1ca4cfe8

  • Size

    371KB

  • Sample

    241110-agd7tavgmf

  • MD5

    e2faeb64e2f3006482c537b88b3bdd0a

  • SHA1

    6889d17c45819ab4bd94d2ac2336ea5ba549b530

  • SHA256

    06bfa86b0b341306bcf87f4777f133e30c1772268161ad4ee06273af1ca4cfe8

  • SHA512

    b1c05d67d6001e7c6e6555533d45d0e0467757868df9e386bee638c0a82fe2b6d60a694538f20c04bf430f47aa37cb32be4ce621d54a66139f0848db80c2d28e

  • SSDEEP

    6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      06bfa86b0b341306bcf87f4777f133e30c1772268161ad4ee06273af1ca4cfe8

    • Size

      371KB

    • MD5

      e2faeb64e2f3006482c537b88b3bdd0a

    • SHA1

      6889d17c45819ab4bd94d2ac2336ea5ba549b530

    • SHA256

      06bfa86b0b341306bcf87f4777f133e30c1772268161ad4ee06273af1ca4cfe8

    • SHA512

      b1c05d67d6001e7c6e6555533d45d0e0467757868df9e386bee638c0a82fe2b6d60a694538f20c04bf430f47aa37cb32be4ce621d54a66139f0848db80c2d28e

    • SSDEEP

      6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks