General

  • Target

    2e3779d4922a134d8aff4990f8f34c5765e03f284fc0fb0636b2f217f72cefc9

  • Size

    383KB

  • Sample

    241111-bmwjqazbrh

  • MD5

    6d25e6584adb182e1d283d32ffb197f3

  • SHA1

    f0f73cd61d748c33ccb0a112bbab960bb33186bf

  • SHA256

    2e3779d4922a134d8aff4990f8f34c5765e03f284fc0fb0636b2f217f72cefc9

  • SHA512

    f5043dd2e0333e5ea4b3780ee9957c2038d88e72704752be72a60311df93986501416b00b6ab9a04c62fabea5e7159c24cd1197ef5578e92a7b8552590f43b64

  • SSDEEP

    6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2e3779d4922a134d8aff4990f8f34c5765e03f284fc0fb0636b2f217f72cefc9

    • Size

      383KB

    • MD5

      6d25e6584adb182e1d283d32ffb197f3

    • SHA1

      f0f73cd61d748c33ccb0a112bbab960bb33186bf

    • SHA256

      2e3779d4922a134d8aff4990f8f34c5765e03f284fc0fb0636b2f217f72cefc9

    • SHA512

      f5043dd2e0333e5ea4b3780ee9957c2038d88e72704752be72a60311df93986501416b00b6ab9a04c62fabea5e7159c24cd1197ef5578e92a7b8552590f43b64

    • SSDEEP

      6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks