General

  • Target

    0df237065896f87f7c0ff0b29afbfcd936b679572f69b5927ca722a0988bba31

  • Size

    438KB

  • Sample

    241111-ennr2ssgpa

  • MD5

    3b0e89d6a9377a49dbb1689989324955

  • SHA1

    83f2f3ecab979a3698a966b48973b82eb667600f

  • SHA256

    0df237065896f87f7c0ff0b29afbfcd936b679572f69b5927ca722a0988bba31

  • SHA512

    529e4c4be41168ccefd769119f5dc12afc0c2976550a5e2b8025d573da6e40857566953ad40a35fb6fb4cd830e1fa6d88c3f592fb11a9cab80c335ea7f12ad49

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      0df237065896f87f7c0ff0b29afbfcd936b679572f69b5927ca722a0988bba31

    • Size

      438KB

    • MD5

      3b0e89d6a9377a49dbb1689989324955

    • SHA1

      83f2f3ecab979a3698a966b48973b82eb667600f

    • SHA256

      0df237065896f87f7c0ff0b29afbfcd936b679572f69b5927ca722a0988bba31

    • SHA512

      529e4c4be41168ccefd769119f5dc12afc0c2976550a5e2b8025d573da6e40857566953ad40a35fb6fb4cd830e1fa6d88c3f592fb11a9cab80c335ea7f12ad49

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks