General

  • Target

    36294addc4e1189fc1b7045c0fc242c5b9c29f4a5a28c70e5082ad6376e19b7f

  • Size

    297KB

  • Sample

    241110-cr3dhawraw

  • MD5

    bff4cff64a26dfbb6e719e215d8a934d

  • SHA1

    df43e5f6e0b67ea3a4c7568b286f86e529fa3f7e

  • SHA256

    36294addc4e1189fc1b7045c0fc242c5b9c29f4a5a28c70e5082ad6376e19b7f

  • SHA512

    5c552109d7950b85e90c532fc4c0ea29a5ecae0d098b4738e5583cde0cebfd9de5b2ff8afcf84f3c0b22137cca2c207df50f66b1659f801f38b0fc9bb3e06629

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      36294addc4e1189fc1b7045c0fc242c5b9c29f4a5a28c70e5082ad6376e19b7f

    • Size

      297KB

    • MD5

      bff4cff64a26dfbb6e719e215d8a934d

    • SHA1

      df43e5f6e0b67ea3a4c7568b286f86e529fa3f7e

    • SHA256

      36294addc4e1189fc1b7045c0fc242c5b9c29f4a5a28c70e5082ad6376e19b7f

    • SHA512

      5c552109d7950b85e90c532fc4c0ea29a5ecae0d098b4738e5583cde0cebfd9de5b2ff8afcf84f3c0b22137cca2c207df50f66b1659f801f38b0fc9bb3e06629

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks