General

  • Target

    7f3e6f5c83db906354043f2001a066475064ccbecc5c2e3eab4bcd80d633316d

  • Size

    298KB

  • Sample

    241111-ejhegasfrc

  • MD5

    9f34ee7cb037cf7a994eef2927b87f6e

  • SHA1

    c0f7d57ddfbac681b5ba19102e29fd2cf4e7fcaf

  • SHA256

    7f3e6f5c83db906354043f2001a066475064ccbecc5c2e3eab4bcd80d633316d

  • SHA512

    b19856eeb35b200a5f129078f505212735164de6e0863dc4b11c1fea87ebfb20e3dfdb929e7de262bbe9f1fa47f9a005bc8da2cd3c7ab4a7ef82b12997936bf1

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7f3e6f5c83db906354043f2001a066475064ccbecc5c2e3eab4bcd80d633316d

    • Size

      298KB

    • MD5

      9f34ee7cb037cf7a994eef2927b87f6e

    • SHA1

      c0f7d57ddfbac681b5ba19102e29fd2cf4e7fcaf

    • SHA256

      7f3e6f5c83db906354043f2001a066475064ccbecc5c2e3eab4bcd80d633316d

    • SHA512

      b19856eeb35b200a5f129078f505212735164de6e0863dc4b11c1fea87ebfb20e3dfdb929e7de262bbe9f1fa47f9a005bc8da2cd3c7ab4a7ef82b12997936bf1

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks