General

  • Target

    dbc26cc5871838247b6d1639271d00cf26c0c19c9b7b65f7d8df5b61b63653ab

  • Size

    370KB

  • Sample

    241110-q7pn8s1mfj

  • MD5

    ce7434fd91b2d18b462e4c3f9c68b8f4

  • SHA1

    eb290f33e6c87e80e88785bb9ca866292dd01025

  • SHA256

    dbc26cc5871838247b6d1639271d00cf26c0c19c9b7b65f7d8df5b61b63653ab

  • SHA512

    72112d8a3a045558b5cf64d2f214c8cbf8bfb73c1dd6b1c0729982827e9af122848961375574922ee84e3b15742f6d5bcf2c0e48171a45925bbcfeac6995141d

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      dbc26cc5871838247b6d1639271d00cf26c0c19c9b7b65f7d8df5b61b63653ab

    • Size

      370KB

    • MD5

      ce7434fd91b2d18b462e4c3f9c68b8f4

    • SHA1

      eb290f33e6c87e80e88785bb9ca866292dd01025

    • SHA256

      dbc26cc5871838247b6d1639271d00cf26c0c19c9b7b65f7d8df5b61b63653ab

    • SHA512

      72112d8a3a045558b5cf64d2f214c8cbf8bfb73c1dd6b1c0729982827e9af122848961375574922ee84e3b15742f6d5bcf2c0e48171a45925bbcfeac6995141d

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks