General

  • Target

    a8c37bd668d6bdcf3038aa5baa7e83d664dd4717a01b3455b3108a16b2140832

  • Size

    438KB

  • Sample

    241110-dpwnlsxphx

  • MD5

    f9867c469302108364857398488d73cb

  • SHA1

    b069f2a259aa0e330aeab4c8551b14ad957a6537

  • SHA256

    a8c37bd668d6bdcf3038aa5baa7e83d664dd4717a01b3455b3108a16b2140832

  • SHA512

    1571f452237e3894799f1328e5f4cfbb5281fd8e08857af79451bd3eb7d11627d881d63de0aa25a4662ad3ff827b998ea6fdb9b70529a6e6a8468ff08ee0d604

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a8c37bd668d6bdcf3038aa5baa7e83d664dd4717a01b3455b3108a16b2140832

    • Size

      438KB

    • MD5

      f9867c469302108364857398488d73cb

    • SHA1

      b069f2a259aa0e330aeab4c8551b14ad957a6537

    • SHA256

      a8c37bd668d6bdcf3038aa5baa7e83d664dd4717a01b3455b3108a16b2140832

    • SHA512

      1571f452237e3894799f1328e5f4cfbb5281fd8e08857af79451bd3eb7d11627d881d63de0aa25a4662ad3ff827b998ea6fdb9b70529a6e6a8468ff08ee0d604

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks