General

  • Target

    0adbe7003b9222d7eb3b3ab91d11227e29ef1a39123bbdc4dbbdb57c21fa6110

  • Size

    298KB

  • Sample

    241111-c95xca1cnr

  • MD5

    0fb6b4d7eee75c84ba69b1cbb11e68dc

  • SHA1

    00eb49b263b60bd18ecd517443befecd24d4a717

  • SHA256

    0adbe7003b9222d7eb3b3ab91d11227e29ef1a39123bbdc4dbbdb57c21fa6110

  • SHA512

    589911bb4b2035f5c063ab28c3c57634d3e392194af6f8529aef0c119c0c069506025893dc83aa25e54bd934cfe3913cc2169da6d618d464f9ee683a4beba94a

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      0adbe7003b9222d7eb3b3ab91d11227e29ef1a39123bbdc4dbbdb57c21fa6110

    • Size

      298KB

    • MD5

      0fb6b4d7eee75c84ba69b1cbb11e68dc

    • SHA1

      00eb49b263b60bd18ecd517443befecd24d4a717

    • SHA256

      0adbe7003b9222d7eb3b3ab91d11227e29ef1a39123bbdc4dbbdb57c21fa6110

    • SHA512

      589911bb4b2035f5c063ab28c3c57634d3e392194af6f8529aef0c119c0c069506025893dc83aa25e54bd934cfe3913cc2169da6d618d464f9ee683a4beba94a

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks