General

  • Target

    96173e0e2b3d28223a6f47b50df531ce2e6deed4c4bd652004c8380d5b77e40b

  • Size

    373KB

  • Sample

    241110-w21gfa1qhv

  • MD5

    236daffa2b700c05a842968f8335ea33

  • SHA1

    d88124502fa64250d0617bc0ddd693e91baec89b

  • SHA256

    96173e0e2b3d28223a6f47b50df531ce2e6deed4c4bd652004c8380d5b77e40b

  • SHA512

    e7dc69a3df4d12fba724c3235ab8eda8696217936c52461460af73f6a77679d045cd863f09bfdfb0c2082e197b5416ad5acca51dfd4a73d199cfa5493110aacb

  • SSDEEP

    6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      96173e0e2b3d28223a6f47b50df531ce2e6deed4c4bd652004c8380d5b77e40b

    • Size

      373KB

    • MD5

      236daffa2b700c05a842968f8335ea33

    • SHA1

      d88124502fa64250d0617bc0ddd693e91baec89b

    • SHA256

      96173e0e2b3d28223a6f47b50df531ce2e6deed4c4bd652004c8380d5b77e40b

    • SHA512

      e7dc69a3df4d12fba724c3235ab8eda8696217936c52461460af73f6a77679d045cd863f09bfdfb0c2082e197b5416ad5acca51dfd4a73d199cfa5493110aacb

    • SSDEEP

      6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks