General

  • Target

    8bda8c22b0a95e08b1c1543ed07949ca3ff6e402194e42a382b7d447c8390e42

  • Size

    423KB

  • Sample

    241111-bpgtcaygrq

  • MD5

    0362f086d919e0c4efc5dc6cb60a2054

  • SHA1

    d2501376b1ea01ded784f4833507faa1a847c80a

  • SHA256

    8bda8c22b0a95e08b1c1543ed07949ca3ff6e402194e42a382b7d447c8390e42

  • SHA512

    67ea79954cb778ccc1f213b86d83e4281552d21b6eca23c8e03ff7a5e941c21771b91ec77d1abb2532078d49849c80515c4b73bf165c3e0187913733e470ff68

  • SSDEEP

    6144:cMui5ObVmy+0LExccD4HOCL+qzPI1vCyuKkYi82Jzj6efYPV0p:GrLExjiOCyqzPI1vCyuKkBJzjL

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      8bda8c22b0a95e08b1c1543ed07949ca3ff6e402194e42a382b7d447c8390e42

    • Size

      423KB

    • MD5

      0362f086d919e0c4efc5dc6cb60a2054

    • SHA1

      d2501376b1ea01ded784f4833507faa1a847c80a

    • SHA256

      8bda8c22b0a95e08b1c1543ed07949ca3ff6e402194e42a382b7d447c8390e42

    • SHA512

      67ea79954cb778ccc1f213b86d83e4281552d21b6eca23c8e03ff7a5e941c21771b91ec77d1abb2532078d49849c80515c4b73bf165c3e0187913733e470ff68

    • SSDEEP

      6144:cMui5ObVmy+0LExccD4HOCL+qzPI1vCyuKkYi82Jzj6efYPV0p:GrLExjiOCyqzPI1vCyuKkBJzjL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks