General

  • Target

    fb4565c9181bd4fb0a9f1e5d60972bb8c6c688ca15905caac9b64366b11231d8

  • Size

    298KB

  • Sample

    241111-cfqkkazhkd

  • MD5

    cf778329c7daf2f3888a0995236c098d

  • SHA1

    86d69f440911c462cf57f4e40ef29d269a54cc79

  • SHA256

    fb4565c9181bd4fb0a9f1e5d60972bb8c6c688ca15905caac9b64366b11231d8

  • SHA512

    c9b035812af40ed2db3e3d38e778abf5fb1a5a9d9119f82a46013c3a15c4f78b6e2ae9977f6c059ff7449a6364bb5d931fce30496525f912cca8ba93020c93eb

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      fb4565c9181bd4fb0a9f1e5d60972bb8c6c688ca15905caac9b64366b11231d8

    • Size

      298KB

    • MD5

      cf778329c7daf2f3888a0995236c098d

    • SHA1

      86d69f440911c462cf57f4e40ef29d269a54cc79

    • SHA256

      fb4565c9181bd4fb0a9f1e5d60972bb8c6c688ca15905caac9b64366b11231d8

    • SHA512

      c9b035812af40ed2db3e3d38e778abf5fb1a5a9d9119f82a46013c3a15c4f78b6e2ae9977f6c059ff7449a6364bb5d931fce30496525f912cca8ba93020c93eb

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks