General

  • Target

    f863e457c83f2fdc23cb950bd46a6a8fc95b53c03532db18b9ee71d035363251

  • Size

    297KB

  • Sample

    241110-kefmzasnf1

  • MD5

    dbfb5153c4fc6622b0f3f789f58cf3d9

  • SHA1

    bee75a6c1511fafd3e19810c378948d8bd9efb34

  • SHA256

    f863e457c83f2fdc23cb950bd46a6a8fc95b53c03532db18b9ee71d035363251

  • SHA512

    f6641a8408354467abc91d689f7d3feccd5f4c7a1f0ee2c05929450d5f01c6587fbd2214da989cdc00ace4b3363f82630c3f24ad8bf250fb9b2c3585cddaa93f

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f863e457c83f2fdc23cb950bd46a6a8fc95b53c03532db18b9ee71d035363251

    • Size

      297KB

    • MD5

      dbfb5153c4fc6622b0f3f789f58cf3d9

    • SHA1

      bee75a6c1511fafd3e19810c378948d8bd9efb34

    • SHA256

      f863e457c83f2fdc23cb950bd46a6a8fc95b53c03532db18b9ee71d035363251

    • SHA512

      f6641a8408354467abc91d689f7d3feccd5f4c7a1f0ee2c05929450d5f01c6587fbd2214da989cdc00ace4b3363f82630c3f24ad8bf250fb9b2c3585cddaa93f

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks