General

  • Target

    25116e08c1635e88834a84ce11a1903de831103dab2d252add36be36ecc71580

  • Size

    452KB

  • Sample

    241111-awfzysxqay

  • MD5

    f70ba55fb2d4c46187bb425e8bf05212

  • SHA1

    6f0bf753db335855292a7e2a3a3854e53508bee8

  • SHA256

    25116e08c1635e88834a84ce11a1903de831103dab2d252add36be36ecc71580

  • SHA512

    8beefa10edd3c429baa1d750ecc1cab96967efed45be0a7d8d1f63fd1e8607a77489bbfe0249a1d0aeaab4eea98474e3409792f4d4cb96e09c7add77a0e0c975

  • SSDEEP

    12288:Jxe0lxbnrp84QB1wVypU0mG3XYAivbzXlrqX:1prp8p5HinVr

Malware Config

Extracted

Family

redline

Botnet

con

C2

45.9.20.59:46272

Attributes
  • auth_value

    49eb79de1df1a8f696d1d70a50dbe736

Targets

    • Target

      25116e08c1635e88834a84ce11a1903de831103dab2d252add36be36ecc71580

    • Size

      452KB

    • MD5

      f70ba55fb2d4c46187bb425e8bf05212

    • SHA1

      6f0bf753db335855292a7e2a3a3854e53508bee8

    • SHA256

      25116e08c1635e88834a84ce11a1903de831103dab2d252add36be36ecc71580

    • SHA512

      8beefa10edd3c429baa1d750ecc1cab96967efed45be0a7d8d1f63fd1e8607a77489bbfe0249a1d0aeaab4eea98474e3409792f4d4cb96e09c7add77a0e0c975

    • SSDEEP

      12288:Jxe0lxbnrp84QB1wVypU0mG3XYAivbzXlrqX:1prp8p5HinVr

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks