General

  • Target

    f987cac2d6f02c50c511153b2bf5dbc71adde0f76b66ca4e8f78a9c25bdff117

  • Size

    428KB

  • Sample

    241111-a7vmgsyemj

  • MD5

    038cc9a0419a178c8186067ebcc01292

  • SHA1

    87a609e78812b1f50aba8f65d96c993eb94d1e59

  • SHA256

    f987cac2d6f02c50c511153b2bf5dbc71adde0f76b66ca4e8f78a9c25bdff117

  • SHA512

    cd4c15f03d262a849219cf564aef8b0075123ef31a41c5dd2532e93fe6ad57e0aa01c7b047051360137a0ad4a8e151ffc8c3dd3fcaafeb291ca2afda5ac8342b

  • SSDEEP

    6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f987cac2d6f02c50c511153b2bf5dbc71adde0f76b66ca4e8f78a9c25bdff117

    • Size

      428KB

    • MD5

      038cc9a0419a178c8186067ebcc01292

    • SHA1

      87a609e78812b1f50aba8f65d96c993eb94d1e59

    • SHA256

      f987cac2d6f02c50c511153b2bf5dbc71adde0f76b66ca4e8f78a9c25bdff117

    • SHA512

      cd4c15f03d262a849219cf564aef8b0075123ef31a41c5dd2532e93fe6ad57e0aa01c7b047051360137a0ad4a8e151ffc8c3dd3fcaafeb291ca2afda5ac8342b

    • SSDEEP

      6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks