General

  • Target

    c9f73f1008cb13fa087ade7ca356315401964aeb7bfd1db94999ffc602cfed43

  • Size

    410KB

  • Sample

    241111-c66pgatrcp

  • MD5

    0b5e9efbcafa32c08c5754b3149531de

  • SHA1

    555c8bc52bb56bdd203032a26b889e34cfd72243

  • SHA256

    c9f73f1008cb13fa087ade7ca356315401964aeb7bfd1db94999ffc602cfed43

  • SHA512

    d13fd99a639345d3420130ac00ccc9ba61d66295dfd8cbfe72cb33dfdadc4ee6610eb8b33edacb3dcc75ce59ac1ce0bb69c49f280f3ced90f422c0cd44bf7fd9

  • SSDEEP

    6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      c9f73f1008cb13fa087ade7ca356315401964aeb7bfd1db94999ffc602cfed43

    • Size

      410KB

    • MD5

      0b5e9efbcafa32c08c5754b3149531de

    • SHA1

      555c8bc52bb56bdd203032a26b889e34cfd72243

    • SHA256

      c9f73f1008cb13fa087ade7ca356315401964aeb7bfd1db94999ffc602cfed43

    • SHA512

      d13fd99a639345d3420130ac00ccc9ba61d66295dfd8cbfe72cb33dfdadc4ee6610eb8b33edacb3dcc75ce59ac1ce0bb69c49f280f3ced90f422c0cd44bf7fd9

    • SSDEEP

      6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks