General

  • Target

    4937c7b3fc2d959fe6dd032efcd9d9f0dc006824a027fed55ffc492eafab87c9

  • Size

    371KB

  • Sample

    241110-wa339asare

  • MD5

    65c2f2d37d9c62915014a589ed10d7e5

  • SHA1

    705ab90ab243f0a82dc8903859558cbcb3d14120

  • SHA256

    4937c7b3fc2d959fe6dd032efcd9d9f0dc006824a027fed55ffc492eafab87c9

  • SHA512

    84a62f7b506978c8a65467706665c5108336defc70cde7395cb2cb60fa91e0d3d526ea5f84e3c4c93ef75ceb76d2a6d9ddb0dfd13b62f15e54b294bb21783022

  • SSDEEP

    6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      4937c7b3fc2d959fe6dd032efcd9d9f0dc006824a027fed55ffc492eafab87c9

    • Size

      371KB

    • MD5

      65c2f2d37d9c62915014a589ed10d7e5

    • SHA1

      705ab90ab243f0a82dc8903859558cbcb3d14120

    • SHA256

      4937c7b3fc2d959fe6dd032efcd9d9f0dc006824a027fed55ffc492eafab87c9

    • SHA512

      84a62f7b506978c8a65467706665c5108336defc70cde7395cb2cb60fa91e0d3d526ea5f84e3c4c93ef75ceb76d2a6d9ddb0dfd13b62f15e54b294bb21783022

    • SSDEEP

      6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks