General

  • Target

    fbd8a32aa2c38fc05094ff9bd1db48998e40a08d4bcd8bff59957e05760bd24c

  • Size

    383KB

  • Sample

    241111-bv4v3ayhrj

  • MD5

    1e6e06c10777df4e1019954c6c3c4c5a

  • SHA1

    41b4dc815efcf81d17f5c104b71411a13485ff12

  • SHA256

    fbd8a32aa2c38fc05094ff9bd1db48998e40a08d4bcd8bff59957e05760bd24c

  • SHA512

    6624fe66846b4687cea6869b033726f2193a6a232d17e9bc88c5df9bfe5263293bd621ca4f7f300011467b2138133d43d417b7723d21b0034e4984bedd4cc311

  • SSDEEP

    6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      fbd8a32aa2c38fc05094ff9bd1db48998e40a08d4bcd8bff59957e05760bd24c

    • Size

      383KB

    • MD5

      1e6e06c10777df4e1019954c6c3c4c5a

    • SHA1

      41b4dc815efcf81d17f5c104b71411a13485ff12

    • SHA256

      fbd8a32aa2c38fc05094ff9bd1db48998e40a08d4bcd8bff59957e05760bd24c

    • SHA512

      6624fe66846b4687cea6869b033726f2193a6a232d17e9bc88c5df9bfe5263293bd621ca4f7f300011467b2138133d43d417b7723d21b0034e4984bedd4cc311

    • SSDEEP

      6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks