General

  • Target

    6abdb4192df9aa070aebdad4f72cf357f5611401777ae559e6f6f955768d3562

  • Size

    438KB

  • Sample

    241110-n9z7mswhnb

  • MD5

    0e3141e9411e9d119ed08752859742c1

  • SHA1

    92c33a4af8395272efe4b90035d99f1c7ebf1db3

  • SHA256

    6abdb4192df9aa070aebdad4f72cf357f5611401777ae559e6f6f955768d3562

  • SHA512

    383701a4ed9ae5506e1f09de1d827a84d8c7b344afdee45d65dcb88748f1df91df3b4b589ef69f347b9d0f1fba071d2f89843bb17c99311f8c2b91144bc88560

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6abdb4192df9aa070aebdad4f72cf357f5611401777ae559e6f6f955768d3562

    • Size

      438KB

    • MD5

      0e3141e9411e9d119ed08752859742c1

    • SHA1

      92c33a4af8395272efe4b90035d99f1c7ebf1db3

    • SHA256

      6abdb4192df9aa070aebdad4f72cf357f5611401777ae559e6f6f955768d3562

    • SHA512

      383701a4ed9ae5506e1f09de1d827a84d8c7b344afdee45d65dcb88748f1df91df3b4b589ef69f347b9d0f1fba071d2f89843bb17c99311f8c2b91144bc88560

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks