General

  • Target

    68ae2e663a9c047f8383e2f457adb21b56ade7947c06bbf768c636e40ec6796d

  • Size

    346KB

  • Sample

    241110-l7dvhstphw

  • MD5

    f052632a23037396ab740ca56558eb95

  • SHA1

    85f785cedf7d30fcc185b3a236fb41e806dfdeea

  • SHA256

    68ae2e663a9c047f8383e2f457adb21b56ade7947c06bbf768c636e40ec6796d

  • SHA512

    d323cb48906d89989371d5bb6a65d3d3897111faf5e7238a1ee3ff2f21dad3dc521d0e1c2b190ca08dc6e127cf9403f32c85e3193b9920c08a74752e6358c49b

  • SSDEEP

    6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      68ae2e663a9c047f8383e2f457adb21b56ade7947c06bbf768c636e40ec6796d

    • Size

      346KB

    • MD5

      f052632a23037396ab740ca56558eb95

    • SHA1

      85f785cedf7d30fcc185b3a236fb41e806dfdeea

    • SHA256

      68ae2e663a9c047f8383e2f457adb21b56ade7947c06bbf768c636e40ec6796d

    • SHA512

      d323cb48906d89989371d5bb6a65d3d3897111faf5e7238a1ee3ff2f21dad3dc521d0e1c2b190ca08dc6e127cf9403f32c85e3193b9920c08a74752e6358c49b

    • SSDEEP

      6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks