General

  • Target

    c76428af7404a12c7c8b2097323b536bfedc5b8a92e744ce3f5a96aaefff9fe7

  • Size

    428KB

  • Sample

    241110-lz4qzaxpcj

  • MD5

    60b2d6e63b0024be5fd4bfeb19cc536a

  • SHA1

    9c97acc27c7d7dc26fbd374ed666d97e53ec428e

  • SHA256

    c76428af7404a12c7c8b2097323b536bfedc5b8a92e744ce3f5a96aaefff9fe7

  • SHA512

    de1084ecc4f53c64367f63acc35f7469d91b28fa4e4345d5ba1ad337b32146c444d558204fbd9d4b574ec146866aa5481b23859a5aa1a7b62e90f2d387f57baf

  • SSDEEP

    6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      c76428af7404a12c7c8b2097323b536bfedc5b8a92e744ce3f5a96aaefff9fe7

    • Size

      428KB

    • MD5

      60b2d6e63b0024be5fd4bfeb19cc536a

    • SHA1

      9c97acc27c7d7dc26fbd374ed666d97e53ec428e

    • SHA256

      c76428af7404a12c7c8b2097323b536bfedc5b8a92e744ce3f5a96aaefff9fe7

    • SHA512

      de1084ecc4f53c64367f63acc35f7469d91b28fa4e4345d5ba1ad337b32146c444d558204fbd9d4b574ec146866aa5481b23859a5aa1a7b62e90f2d387f57baf

    • SSDEEP

      6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks