General

  • Target

    2dec2bbf7c3b1eecc184abc8c005238d73660931e8275c2ca114354bd40c8632

  • Size

    297KB

  • Sample

    241110-h9rydasfkh

  • MD5

    0f0d20a139ded221db24e1dfa1b41776

  • SHA1

    64fa209894a5b6d2b88336ecc0254ff2d5e8f10e

  • SHA256

    2dec2bbf7c3b1eecc184abc8c005238d73660931e8275c2ca114354bd40c8632

  • SHA512

    62e2cf95f9525994cac4333a89cdf5b92837abae5a78282c86a1a5cd4c7faa9041fb6d57aa6de22966b29270d2e2bff8fb2321a55a282b341d42bd21160f6a19

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2dec2bbf7c3b1eecc184abc8c005238d73660931e8275c2ca114354bd40c8632

    • Size

      297KB

    • MD5

      0f0d20a139ded221db24e1dfa1b41776

    • SHA1

      64fa209894a5b6d2b88336ecc0254ff2d5e8f10e

    • SHA256

      2dec2bbf7c3b1eecc184abc8c005238d73660931e8275c2ca114354bd40c8632

    • SHA512

      62e2cf95f9525994cac4333a89cdf5b92837abae5a78282c86a1a5cd4c7faa9041fb6d57aa6de22966b29270d2e2bff8fb2321a55a282b341d42bd21160f6a19

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks