General

  • Target

    9703af8af14cf0f893bc4be1e2ccde67c2f58661105636ab46de2ac1a340376e

  • Size

    427KB

  • Sample

    241110-k3ncqatgmb

  • MD5

    510023c30e6c16b3982ad030aa88ed69

  • SHA1

    5df2f3b6563d2f71c6076c7d4054d360d03c0dda

  • SHA256

    9703af8af14cf0f893bc4be1e2ccde67c2f58661105636ab46de2ac1a340376e

  • SHA512

    3f297ff4ef884468a7ef795b548b0d7cdae838e16bd9d6777fcff39f3ed7bab59d64202b35cea4e78e96f028b2c5903d0d87b44e8842299215847369c136997f

  • SSDEEP

    6144:B0NMGv1CXJ7ATf6/5e2R98GDETSGhcTdzhSWa7OJ/thn/IyG8Fzk:BlGdICf6/5fvETSGhcTdzcWaAnAy0

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      9703af8af14cf0f893bc4be1e2ccde67c2f58661105636ab46de2ac1a340376e

    • Size

      427KB

    • MD5

      510023c30e6c16b3982ad030aa88ed69

    • SHA1

      5df2f3b6563d2f71c6076c7d4054d360d03c0dda

    • SHA256

      9703af8af14cf0f893bc4be1e2ccde67c2f58661105636ab46de2ac1a340376e

    • SHA512

      3f297ff4ef884468a7ef795b548b0d7cdae838e16bd9d6777fcff39f3ed7bab59d64202b35cea4e78e96f028b2c5903d0d87b44e8842299215847369c136997f

    • SSDEEP

      6144:B0NMGv1CXJ7ATf6/5e2R98GDETSGhcTdzhSWa7OJ/thn/IyG8Fzk:BlGdICf6/5fvETSGhcTdzcWaAnAy0

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks