General

  • Target

    e60a426ca6a9469a97049d750b6cde8104af4ebf372bd9965b8ee9632d8f645e

  • Size

    445KB

  • Sample

    241111-ab7xyaxmat

  • MD5

    4a66eca706d898b220f00c0a77cf21f9

  • SHA1

    84b6f714ee81f715b11345cb4399df6b537fd257

  • SHA256

    e60a426ca6a9469a97049d750b6cde8104af4ebf372bd9965b8ee9632d8f645e

  • SHA512

    96b94fc25388215d903375dfed2c2ca7cf81aef8724d15da3d5be1af646f3492fbef095b3f587765097cce33bf090397350543016b7b4c46f542aa73225e2b00

  • SSDEEP

    12288:YQReUiWXD0vcHxmvmWekPoZUlcP/zMhR:YRUNgvcHwmg5sz

Malware Config

Extracted

Family

redline

Botnet

ww

C2

45.9.20.168:46257

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      e60a426ca6a9469a97049d750b6cde8104af4ebf372bd9965b8ee9632d8f645e

    • Size

      445KB

    • MD5

      4a66eca706d898b220f00c0a77cf21f9

    • SHA1

      84b6f714ee81f715b11345cb4399df6b537fd257

    • SHA256

      e60a426ca6a9469a97049d750b6cde8104af4ebf372bd9965b8ee9632d8f645e

    • SHA512

      96b94fc25388215d903375dfed2c2ca7cf81aef8724d15da3d5be1af646f3492fbef095b3f587765097cce33bf090397350543016b7b4c46f542aa73225e2b00

    • SSDEEP

      12288:YQReUiWXD0vcHxmvmWekPoZUlcP/zMhR:YRUNgvcHwmg5sz

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks