General

  • Target

    69dafd663b60d7020d7aa8c51b85a665db7986f5e4dda341e77e5d9fef6dd009

  • Size

    297KB

  • Sample

    241110-pb7dqszkbk

  • MD5

    72713185f52d701f215503b957f34cc2

  • SHA1

    289bdc42ddc69b2e24c7bb72f4fef6c1501c1130

  • SHA256

    69dafd663b60d7020d7aa8c51b85a665db7986f5e4dda341e77e5d9fef6dd009

  • SHA512

    93081fbbfb781af930f71f6c1b4738f25646a55ad6dd7b97bcff7d53f6068b2ff7b2d7f8b755bb9b0ea69dde434de77f03f9b0f7d17e57203f465a9a952a9ac8

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      69dafd663b60d7020d7aa8c51b85a665db7986f5e4dda341e77e5d9fef6dd009

    • Size

      297KB

    • MD5

      72713185f52d701f215503b957f34cc2

    • SHA1

      289bdc42ddc69b2e24c7bb72f4fef6c1501c1130

    • SHA256

      69dafd663b60d7020d7aa8c51b85a665db7986f5e4dda341e77e5d9fef6dd009

    • SHA512

      93081fbbfb781af930f71f6c1b4738f25646a55ad6dd7b97bcff7d53f6068b2ff7b2d7f8b755bb9b0ea69dde434de77f03f9b0f7d17e57203f465a9a952a9ac8

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks