General

  • Target

    084d5e2dfabc1f97ad3213c5b1a2459bfbd8bf17acf91286b873a3c513a56aa2

  • Size

    373KB

  • Sample

    241110-zw3w6avhnc

  • MD5

    601fee73d4a3d30e0df8b38810c99ee2

  • SHA1

    9146166dd3990f74276069c8764388c009338c36

  • SHA256

    084d5e2dfabc1f97ad3213c5b1a2459bfbd8bf17acf91286b873a3c513a56aa2

  • SHA512

    c4c69a82ee28e611a3f72ea66fb845e4aac17c8e8d0e833ee571b35c28bc25f11e65ade16d6e30f20a1a06e9bbdb49a3d4a93604589090bf5285ee79b217a91c

  • SSDEEP

    6144:EWuG6QBaODOgsxbXsxsZSwzfuAXlkmwTbs3Fb7ITsqXigaXwVfz:EWuG6QBaODOg489wznXbwvi7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      084d5e2dfabc1f97ad3213c5b1a2459bfbd8bf17acf91286b873a3c513a56aa2

    • Size

      373KB

    • MD5

      601fee73d4a3d30e0df8b38810c99ee2

    • SHA1

      9146166dd3990f74276069c8764388c009338c36

    • SHA256

      084d5e2dfabc1f97ad3213c5b1a2459bfbd8bf17acf91286b873a3c513a56aa2

    • SHA512

      c4c69a82ee28e611a3f72ea66fb845e4aac17c8e8d0e833ee571b35c28bc25f11e65ade16d6e30f20a1a06e9bbdb49a3d4a93604589090bf5285ee79b217a91c

    • SSDEEP

      6144:EWuG6QBaODOgsxbXsxsZSwzfuAXlkmwTbs3Fb7ITsqXigaXwVfz:EWuG6QBaODOg489wznXbwvi7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks