General

  • Target

    069ff68546bf4dff128202e9757253bea88acb10c63ce18c82bfd135431f5c58

  • Size

    298KB

  • Sample

    241110-va7k1a1dqf

  • MD5

    6b86130eaa6bc32db6f8a6e62870a550

  • SHA1

    84ee0d5c99b8dac95288fe3d4d19288775d88f3d

  • SHA256

    069ff68546bf4dff128202e9757253bea88acb10c63ce18c82bfd135431f5c58

  • SHA512

    01178ebcb52d221ff478bd90c349e496d3e6644879214c691dc43f560edbfc178c9c2c13e0c940f4345568104340ba33376b1a61371d6d9837ee47f6e652ab9d

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      069ff68546bf4dff128202e9757253bea88acb10c63ce18c82bfd135431f5c58

    • Size

      298KB

    • MD5

      6b86130eaa6bc32db6f8a6e62870a550

    • SHA1

      84ee0d5c99b8dac95288fe3d4d19288775d88f3d

    • SHA256

      069ff68546bf4dff128202e9757253bea88acb10c63ce18c82bfd135431f5c58

    • SHA512

      01178ebcb52d221ff478bd90c349e496d3e6644879214c691dc43f560edbfc178c9c2c13e0c940f4345568104340ba33376b1a61371d6d9837ee47f6e652ab9d

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks