General

  • Target

    f700e0fb75d65561cd34633a03a5a1f30f0059d980b6edbc41f8b77afd42902c

  • Size

    297KB

  • Sample

    241110-n7qkeswepn

  • MD5

    2f80783550d309880a8ed8bf92227838

  • SHA1

    aaffcaa3079d985b3f759c0ed850fd4e9535804d

  • SHA256

    f700e0fb75d65561cd34633a03a5a1f30f0059d980b6edbc41f8b77afd42902c

  • SHA512

    b139fafcef9c6480b3d31aa64c5f276bdd848401e5f345e932f54caa1c7ef9aab4fc7e43e3718b2a3d2c6d559438bd47f9c6a1461bc829ed93ff773cc1a102cf

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f700e0fb75d65561cd34633a03a5a1f30f0059d980b6edbc41f8b77afd42902c

    • Size

      297KB

    • MD5

      2f80783550d309880a8ed8bf92227838

    • SHA1

      aaffcaa3079d985b3f759c0ed850fd4e9535804d

    • SHA256

      f700e0fb75d65561cd34633a03a5a1f30f0059d980b6edbc41f8b77afd42902c

    • SHA512

      b139fafcef9c6480b3d31aa64c5f276bdd848401e5f345e932f54caa1c7ef9aab4fc7e43e3718b2a3d2c6d559438bd47f9c6a1461bc829ed93ff773cc1a102cf

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks