General

  • Target

    6f9c646e9584ff796f6b201d1a91da10e03deab874a6ad5900facbd09b8777c1

  • Size

    438KB

  • Sample

    241110-hab3wa1kgw

  • MD5

    489d9558610ea2bde59eed85b1ce91b2

  • SHA1

    1f34396968bfe45bbc03c26f1dc3462d0f51a72c

  • SHA256

    6f9c646e9584ff796f6b201d1a91da10e03deab874a6ad5900facbd09b8777c1

  • SHA512

    9c3b0924b561cc21eb32204b089d325f37853aa4b028112199c357b28fa61920519b722248257eb6227f414904ea5f1b59de425ca0a2b04435b95154de671d6d

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6f9c646e9584ff796f6b201d1a91da10e03deab874a6ad5900facbd09b8777c1

    • Size

      438KB

    • MD5

      489d9558610ea2bde59eed85b1ce91b2

    • SHA1

      1f34396968bfe45bbc03c26f1dc3462d0f51a72c

    • SHA256

      6f9c646e9584ff796f6b201d1a91da10e03deab874a6ad5900facbd09b8777c1

    • SHA512

      9c3b0924b561cc21eb32204b089d325f37853aa4b028112199c357b28fa61920519b722248257eb6227f414904ea5f1b59de425ca0a2b04435b95154de671d6d

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks