General

  • Target

    f28d9c71878617e7c2af7f300413557164dc212af6ce7d30d20b18ad77842a37

  • Size

    297KB

  • Sample

    241110-sve1daypct

  • MD5

    213438d4e1138d2adca8a708aa9eb724

  • SHA1

    c0dd5df5a4a3762473774447a7d7501d3aff0459

  • SHA256

    f28d9c71878617e7c2af7f300413557164dc212af6ce7d30d20b18ad77842a37

  • SHA512

    3b4894a660d9215047aea4d0d40ca62d36b71f0178b807272ebfa49c55b40dafa7b58d3495b0c5254026695b4702a69d8ddfcc1df3b9ea0ccd2fac277a943b94

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f28d9c71878617e7c2af7f300413557164dc212af6ce7d30d20b18ad77842a37

    • Size

      297KB

    • MD5

      213438d4e1138d2adca8a708aa9eb724

    • SHA1

      c0dd5df5a4a3762473774447a7d7501d3aff0459

    • SHA256

      f28d9c71878617e7c2af7f300413557164dc212af6ce7d30d20b18ad77842a37

    • SHA512

      3b4894a660d9215047aea4d0d40ca62d36b71f0178b807272ebfa49c55b40dafa7b58d3495b0c5254026695b4702a69d8ddfcc1df3b9ea0ccd2fac277a943b94

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks