General

  • Target

    c1270fc0ac73e086e241cb498d67a61b3bccdb6f1c00b4f96a69a82b25b6dfc3

  • Size

    423KB

  • Sample

    241111-a82r7ayhpa

  • MD5

    098428b3392a2b8baf38a519936f3599

  • SHA1

    1848826243334aeb4dc2ad2353fa5714ba98171a

  • SHA256

    c1270fc0ac73e086e241cb498d67a61b3bccdb6f1c00b4f96a69a82b25b6dfc3

  • SHA512

    23a1c64a885d02df48c531243f0d8993444fe904ffd84fdba9e6ca27253b6460b823cd52fb4f621bbe443919bed5d19d8c11b8950bbbfdf60131b392b355127d

  • SSDEEP

    6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      c1270fc0ac73e086e241cb498d67a61b3bccdb6f1c00b4f96a69a82b25b6dfc3

    • Size

      423KB

    • MD5

      098428b3392a2b8baf38a519936f3599

    • SHA1

      1848826243334aeb4dc2ad2353fa5714ba98171a

    • SHA256

      c1270fc0ac73e086e241cb498d67a61b3bccdb6f1c00b4f96a69a82b25b6dfc3

    • SHA512

      23a1c64a885d02df48c531243f0d8993444fe904ffd84fdba9e6ca27253b6460b823cd52fb4f621bbe443919bed5d19d8c11b8950bbbfdf60131b392b355127d

    • SSDEEP

      6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks