General

  • Target

    79175f5337a9dd1238fbede95e0f61d7777d5ec14a25d21290b4908405d8073c

  • Size

    438KB

  • Sample

    241110-m8k6navmew

  • MD5

    29f551ceb8a4dd3722f508ef04000520

  • SHA1

    f060a86935c1d39acd9a1f897bb5d13be0882c2e

  • SHA256

    79175f5337a9dd1238fbede95e0f61d7777d5ec14a25d21290b4908405d8073c

  • SHA512

    d945e3aa964cfee219228e25636cea19225d94d761af9260e2966491f5b3b8f1cca86a9a7307cfd299933bfe40eeec56b969d16461475c85324bc94796be9c1f

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      79175f5337a9dd1238fbede95e0f61d7777d5ec14a25d21290b4908405d8073c

    • Size

      438KB

    • MD5

      29f551ceb8a4dd3722f508ef04000520

    • SHA1

      f060a86935c1d39acd9a1f897bb5d13be0882c2e

    • SHA256

      79175f5337a9dd1238fbede95e0f61d7777d5ec14a25d21290b4908405d8073c

    • SHA512

      d945e3aa964cfee219228e25636cea19225d94d761af9260e2966491f5b3b8f1cca86a9a7307cfd299933bfe40eeec56b969d16461475c85324bc94796be9c1f

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks