General

  • Target

    7a80abf103eaee2db4e0032f97f9525c934154098c5e91352acaa7f818c8c97e

  • Size

    383KB

  • Sample

    241110-zypgjsvhrf

  • MD5

    a6edc4db74fe5780a3e123a85c648825

  • SHA1

    327fd2a9c9c855a795be2b677604445cdeb8e55c

  • SHA256

    7a80abf103eaee2db4e0032f97f9525c934154098c5e91352acaa7f818c8c97e

  • SHA512

    0a856c2b48638b2c9a988eb96fb0ec4c983ca69f82d479de1b492eec4c7f37722667919e443d51a9232ddd9dcafd9d09cc9792a72ca78690305d1cdc2e52f9a6

  • SSDEEP

    6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7a80abf103eaee2db4e0032f97f9525c934154098c5e91352acaa7f818c8c97e

    • Size

      383KB

    • MD5

      a6edc4db74fe5780a3e123a85c648825

    • SHA1

      327fd2a9c9c855a795be2b677604445cdeb8e55c

    • SHA256

      7a80abf103eaee2db4e0032f97f9525c934154098c5e91352acaa7f818c8c97e

    • SHA512

      0a856c2b48638b2c9a988eb96fb0ec4c983ca69f82d479de1b492eec4c7f37722667919e443d51a9232ddd9dcafd9d09cc9792a72ca78690305d1cdc2e52f9a6

    • SSDEEP

      6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks