General

  • Target

    2ebc2eeb0c194dda7ddebbca55e8bc1ffb5de6122757b417311b3661985d2d61

  • Size

    423KB

  • Sample

    241110-e1f8qszdqg

  • MD5

    e371bf6e3aa5ec157da92f1e315c400c

  • SHA1

    412362a424d3697cd190eaef97d49b40d06c7354

  • SHA256

    2ebc2eeb0c194dda7ddebbca55e8bc1ffb5de6122757b417311b3661985d2d61

  • SHA512

    deaae61bfdfa6502cfba719cde7f30048a496111bd6276e5fc52a035b0444d475132f1d65ab77f895c578892a033d9ac847fa6fd4df45b982cc90cee8b2d2dca

  • SSDEEP

    6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2ebc2eeb0c194dda7ddebbca55e8bc1ffb5de6122757b417311b3661985d2d61

    • Size

      423KB

    • MD5

      e371bf6e3aa5ec157da92f1e315c400c

    • SHA1

      412362a424d3697cd190eaef97d49b40d06c7354

    • SHA256

      2ebc2eeb0c194dda7ddebbca55e8bc1ffb5de6122757b417311b3661985d2d61

    • SHA512

      deaae61bfdfa6502cfba719cde7f30048a496111bd6276e5fc52a035b0444d475132f1d65ab77f895c578892a033d9ac847fa6fd4df45b982cc90cee8b2d2dca

    • SSDEEP

      6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks