General

  • Target

    7da5f43963e51e5fd0cc4fedae93443fc50bf2d29fe89585756580e18aecbb78

  • Size

    297KB

  • Sample

    241110-fga32szjfz

  • MD5

    051ff020a0cf5035f3543664b331a8ca

  • SHA1

    2f7fe6c2e9f3deee63097bef0ce18c51e71c8c01

  • SHA256

    7da5f43963e51e5fd0cc4fedae93443fc50bf2d29fe89585756580e18aecbb78

  • SHA512

    60d6362ae4e329353b91a7dfac06a41b8221bb5d7ef8ce85ddf73f39362fb9e866860a11eea170c1f6bce5abbc4b0134ae006e11ed6f43b0f5d0b635f2809846

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7da5f43963e51e5fd0cc4fedae93443fc50bf2d29fe89585756580e18aecbb78

    • Size

      297KB

    • MD5

      051ff020a0cf5035f3543664b331a8ca

    • SHA1

      2f7fe6c2e9f3deee63097bef0ce18c51e71c8c01

    • SHA256

      7da5f43963e51e5fd0cc4fedae93443fc50bf2d29fe89585756580e18aecbb78

    • SHA512

      60d6362ae4e329353b91a7dfac06a41b8221bb5d7ef8ce85ddf73f39362fb9e866860a11eea170c1f6bce5abbc4b0134ae006e11ed6f43b0f5d0b635f2809846

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks