General

  • Target

    7f7fd3da42b5c25271ab8793eccd4b49095828f802e7b4e1052af4915f25f0fc

  • Size

    297KB

  • Sample

    241111-bpyf4aymat

  • MD5

    c56235838ea82cd383063f0029b06125

  • SHA1

    3f9c943d76fb8f89a6957315e0573febe7123a88

  • SHA256

    7f7fd3da42b5c25271ab8793eccd4b49095828f802e7b4e1052af4915f25f0fc

  • SHA512

    f09aadf1f3b35e697a08eab2edc77a2d12554a8e0f0dc32757a7cf8cd5df8d1747f84ca106cc6faa7ee20bb8afa673c2773f1e0b37fbb72774ae9ff5f10cd7fe

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7f7fd3da42b5c25271ab8793eccd4b49095828f802e7b4e1052af4915f25f0fc

    • Size

      297KB

    • MD5

      c56235838ea82cd383063f0029b06125

    • SHA1

      3f9c943d76fb8f89a6957315e0573febe7123a88

    • SHA256

      7f7fd3da42b5c25271ab8793eccd4b49095828f802e7b4e1052af4915f25f0fc

    • SHA512

      f09aadf1f3b35e697a08eab2edc77a2d12554a8e0f0dc32757a7cf8cd5df8d1747f84ca106cc6faa7ee20bb8afa673c2773f1e0b37fbb72774ae9ff5f10cd7fe

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks