General

  • Target

    83a496766640d370f61c2d122982533a402ae315ab948470db38f8c82aa8947d

  • Size

    438KB

  • Sample

    241110-xp2peasmbw

  • MD5

    3c2bc3362be3874606184a37c58b6aaf

  • SHA1

    90aa00a5358e0d5271e23bf960a1ee08f829c3d4

  • SHA256

    83a496766640d370f61c2d122982533a402ae315ab948470db38f8c82aa8947d

  • SHA512

    b7e8e7b14fff86feda995a06218eeba8c2924ff424cbb41afb80438f5f3edef82f48503f3b53baf9de2ac07c64349c42c72f29fbd036e1ba46c409b182816cf6

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      83a496766640d370f61c2d122982533a402ae315ab948470db38f8c82aa8947d

    • Size

      438KB

    • MD5

      3c2bc3362be3874606184a37c58b6aaf

    • SHA1

      90aa00a5358e0d5271e23bf960a1ee08f829c3d4

    • SHA256

      83a496766640d370f61c2d122982533a402ae315ab948470db38f8c82aa8947d

    • SHA512

      b7e8e7b14fff86feda995a06218eeba8c2924ff424cbb41afb80438f5f3edef82f48503f3b53baf9de2ac07c64349c42c72f29fbd036e1ba46c409b182816cf6

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks