General

  • Target

    a3779663dde2ddc958144fd427dd60bb97fe18f9164e42c721bd48193e191997

  • Size

    423KB

  • Sample

    241110-bk4gjswfja

  • MD5

    3e8167bf32f199db929112c4007ad52d

  • SHA1

    aaa07290886d54668384bb3f15dffeab5b6eda62

  • SHA256

    a3779663dde2ddc958144fd427dd60bb97fe18f9164e42c721bd48193e191997

  • SHA512

    072981acf84a2a1a3ca337fa50b1c7c4e199b900b387ef471420832cddd667b0836cbc56b1d93f3db272654c80d39f5e79efb97ee3a6de15673bbb7b8f1bf8cd

  • SSDEEP

    6144:cMui5ObVmy+0LExccD4HOCL+qzPI1vCyuKkYi82Jzj6efYPV0p:GrLExjiOCyqzPI1vCyuKkBJzjL

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a3779663dde2ddc958144fd427dd60bb97fe18f9164e42c721bd48193e191997

    • Size

      423KB

    • MD5

      3e8167bf32f199db929112c4007ad52d

    • SHA1

      aaa07290886d54668384bb3f15dffeab5b6eda62

    • SHA256

      a3779663dde2ddc958144fd427dd60bb97fe18f9164e42c721bd48193e191997

    • SHA512

      072981acf84a2a1a3ca337fa50b1c7c4e199b900b387ef471420832cddd667b0836cbc56b1d93f3db272654c80d39f5e79efb97ee3a6de15673bbb7b8f1bf8cd

    • SSDEEP

      6144:cMui5ObVmy+0LExccD4HOCL+qzPI1vCyuKkYi82Jzj6efYPV0p:GrLExjiOCyqzPI1vCyuKkBJzjL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks