General

  • Target

    16c0502f58eeb075ddd149e44fd7b5df841a63fe1969d4bdae0f5bd72415d47e

  • Size

    293KB

  • Sample

    241110-bqgvqswfqe

  • MD5

    39be2485abeed3db289555abf6e2f9cf

  • SHA1

    2f95babdcf124e2c2a9809198cd55eace6638d46

  • SHA256

    16c0502f58eeb075ddd149e44fd7b5df841a63fe1969d4bdae0f5bd72415d47e

  • SHA512

    6ecc68c4db9a5071f066089fe3019cb1ded8331edf92ee41a7d576ba447738ff3604338eb4734b29f85438fb9c9806b1def1a6d8fc7ccfa8351e83225499de05

  • SSDEEP

    6144:st4ELrrMBa2I+QoWfyJqdkUV+Nuzbgwu:st4EHrMBf1RWfyJqdkNunn

Malware Config

Extracted

Family

redline

Botnet

ww

C2

45.9.20.168:46257

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      16c0502f58eeb075ddd149e44fd7b5df841a63fe1969d4bdae0f5bd72415d47e

    • Size

      293KB

    • MD5

      39be2485abeed3db289555abf6e2f9cf

    • SHA1

      2f95babdcf124e2c2a9809198cd55eace6638d46

    • SHA256

      16c0502f58eeb075ddd149e44fd7b5df841a63fe1969d4bdae0f5bd72415d47e

    • SHA512

      6ecc68c4db9a5071f066089fe3019cb1ded8331edf92ee41a7d576ba447738ff3604338eb4734b29f85438fb9c9806b1def1a6d8fc7ccfa8351e83225499de05

    • SSDEEP

      6144:st4ELrrMBa2I+QoWfyJqdkUV+Nuzbgwu:st4EHrMBf1RWfyJqdkNunn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks