General

  • Target

    62f96c201fbced32f5160b1e6ec7bdc052e857d020f0d274f513aab3fa5511e8

  • Size

    370KB

  • Sample

    241110-d2btza1ram

  • MD5

    0bf40c0dd2a58176271739a36c33d819

  • SHA1

    48ddb7101cddc14ea98e6650ffc833b67367c634

  • SHA256

    62f96c201fbced32f5160b1e6ec7bdc052e857d020f0d274f513aab3fa5511e8

  • SHA512

    d9860c0ca1c0d90635588ca312891f582f35b0c1645a8aa8ddcf9c893f9d7a5f041c7b74eeac3490acae3a8a83ec37183ad88bcfe49947610ea0974aadf9172a

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      62f96c201fbced32f5160b1e6ec7bdc052e857d020f0d274f513aab3fa5511e8

    • Size

      370KB

    • MD5

      0bf40c0dd2a58176271739a36c33d819

    • SHA1

      48ddb7101cddc14ea98e6650ffc833b67367c634

    • SHA256

      62f96c201fbced32f5160b1e6ec7bdc052e857d020f0d274f513aab3fa5511e8

    • SHA512

      d9860c0ca1c0d90635588ca312891f582f35b0c1645a8aa8ddcf9c893f9d7a5f041c7b74eeac3490acae3a8a83ec37183ad88bcfe49947610ea0974aadf9172a

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks