General

  • Target

    77120b124923908a231e5d1e5038ce5a887e869488a31b9761b2bba99ce6d06d

  • Size

    297KB

  • Sample

    241110-j5yqsssmb1

  • MD5

    76925c2ec2701843218e3dd723288204

  • SHA1

    965f7e2f3a42f04d719e2270513bd3efbd774458

  • SHA256

    77120b124923908a231e5d1e5038ce5a887e869488a31b9761b2bba99ce6d06d

  • SHA512

    fd2fc56baed06c6f5f2c0eb702dd49199c78e73a452518a095caf08af71feae3fd06c3ee4027f48c27b3625193876e8cccdc6692b5dc21fc9670a358762e3dfb

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      77120b124923908a231e5d1e5038ce5a887e869488a31b9761b2bba99ce6d06d

    • Size

      297KB

    • MD5

      76925c2ec2701843218e3dd723288204

    • SHA1

      965f7e2f3a42f04d719e2270513bd3efbd774458

    • SHA256

      77120b124923908a231e5d1e5038ce5a887e869488a31b9761b2bba99ce6d06d

    • SHA512

      fd2fc56baed06c6f5f2c0eb702dd49199c78e73a452518a095caf08af71feae3fd06c3ee4027f48c27b3625193876e8cccdc6692b5dc21fc9670a358762e3dfb

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks