General

  • Target

    27ee3f01e3f00cf99632c86da4fa6130cd9e94e287797c9d96eebc5b4a8789c6

  • Size

    423KB

  • Sample

    241110-qav5raxfjh

  • MD5

    416443281bb93f0adc39d7cec4c90b00

  • SHA1

    fc4de10de30a51fd7f75d47cecc6af057805d1e2

  • SHA256

    27ee3f01e3f00cf99632c86da4fa6130cd9e94e287797c9d96eebc5b4a8789c6

  • SHA512

    2a27ffa62a88d301a61351d198bb39d0fb63fdf8ca39346a69a5d5a25b3c1b716af556a581f7da4b92f119e3660a94ef2592bbc9216c3502b14d51c839f8a635

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      27ee3f01e3f00cf99632c86da4fa6130cd9e94e287797c9d96eebc5b4a8789c6

    • Size

      423KB

    • MD5

      416443281bb93f0adc39d7cec4c90b00

    • SHA1

      fc4de10de30a51fd7f75d47cecc6af057805d1e2

    • SHA256

      27ee3f01e3f00cf99632c86da4fa6130cd9e94e287797c9d96eebc5b4a8789c6

    • SHA512

      2a27ffa62a88d301a61351d198bb39d0fb63fdf8ca39346a69a5d5a25b3c1b716af556a581f7da4b92f119e3660a94ef2592bbc9216c3502b14d51c839f8a635

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks