General

  • Target

    842bbfe5607c207925760304bdc34c1df317f51a6eb30378abbadcd67dfc9727

  • Size

    394KB

  • Sample

    241110-xybvcatcnd

  • MD5

    9a5cddd5fbc17913949a31105da34019

  • SHA1

    cc8436b4a3634363769d0383b6475eb357693c31

  • SHA256

    842bbfe5607c207925760304bdc34c1df317f51a6eb30378abbadcd67dfc9727

  • SHA512

    85021126b398576f42dd717527637ea648ce3011beaeb25753376d687068359fb362613a18fd79a0630adcc94cb88a7ef82f308c9bef8547415242758561b0b9

  • SSDEEP

    6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      842bbfe5607c207925760304bdc34c1df317f51a6eb30378abbadcd67dfc9727

    • Size

      394KB

    • MD5

      9a5cddd5fbc17913949a31105da34019

    • SHA1

      cc8436b4a3634363769d0383b6475eb357693c31

    • SHA256

      842bbfe5607c207925760304bdc34c1df317f51a6eb30378abbadcd67dfc9727

    • SHA512

      85021126b398576f42dd717527637ea648ce3011beaeb25753376d687068359fb362613a18fd79a0630adcc94cb88a7ef82f308c9bef8547415242758561b0b9

    • SSDEEP

      6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks