General

  • Target

    7d7e1f2913b832ea80b8fb0e07d3fba81f41631e13d858da599a6150ead1a690

  • Size

    438KB

  • Sample

    241110-vbshgazpds

  • MD5

    de62d3120b08d93657e0bca9062d511f

  • SHA1

    40a39b228aee6d5e00b5def53fca9f0e145e88d5

  • SHA256

    7d7e1f2913b832ea80b8fb0e07d3fba81f41631e13d858da599a6150ead1a690

  • SHA512

    f0b71448b2cedcc514822daaba80bf550b86281fbdf4e0b9ada723d3c9c48d50924ec4959c2738b1a1c4e544809b931ea0764d0ec14443ded305280481db0d0d

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7d7e1f2913b832ea80b8fb0e07d3fba81f41631e13d858da599a6150ead1a690

    • Size

      438KB

    • MD5

      de62d3120b08d93657e0bca9062d511f

    • SHA1

      40a39b228aee6d5e00b5def53fca9f0e145e88d5

    • SHA256

      7d7e1f2913b832ea80b8fb0e07d3fba81f41631e13d858da599a6150ead1a690

    • SHA512

      f0b71448b2cedcc514822daaba80bf550b86281fbdf4e0b9ada723d3c9c48d50924ec4959c2738b1a1c4e544809b931ea0764d0ec14443ded305280481db0d0d

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks