General

  • Target

    7ae6603a522cdd1c038973f26ee901775fcc0f07f3199b13f367840a5892ff9a

  • Size

    438KB

  • Sample

    241111-a2ghns1req

  • MD5

    5556f9484a3ef581682d75a575564939

  • SHA1

    a741323c611942902a65eb55ff8380b4d2467227

  • SHA256

    7ae6603a522cdd1c038973f26ee901775fcc0f07f3199b13f367840a5892ff9a

  • SHA512

    a3668671ea2c1e043848f390da3a6ab30d65cb7a0819f7f83a80a1b1c488fbb2cf996a37d1ca9844339c94632aa063895d524a24376050b152f0e943b646855e

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7ae6603a522cdd1c038973f26ee901775fcc0f07f3199b13f367840a5892ff9a

    • Size

      438KB

    • MD5

      5556f9484a3ef581682d75a575564939

    • SHA1

      a741323c611942902a65eb55ff8380b4d2467227

    • SHA256

      7ae6603a522cdd1c038973f26ee901775fcc0f07f3199b13f367840a5892ff9a

    • SHA512

      a3668671ea2c1e043848f390da3a6ab30d65cb7a0819f7f83a80a1b1c488fbb2cf996a37d1ca9844339c94632aa063895d524a24376050b152f0e943b646855e

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks