General

  • Target

    fa339d418e0036788b009ad3e7e77bfbca237f307f5422f2db9ce554c35ee78d

  • Size

    373KB

  • Sample

    241111-f26epasray

  • MD5

    f41a56c0b5baf138fceef831cac9055b

  • SHA1

    e9d13eba17aa2114dab97fe45559b5904e8bdb69

  • SHA256

    fa339d418e0036788b009ad3e7e77bfbca237f307f5422f2db9ce554c35ee78d

  • SHA512

    616b69e54fb1dc4da7c89c26b42e17943f69e11a88221879236073a6cc4c51f6033cdb881d68f3547cab1e963fb8fe02fab598379fbcd6037fee7c95aa7270a4

  • SSDEEP

    6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      fa339d418e0036788b009ad3e7e77bfbca237f307f5422f2db9ce554c35ee78d

    • Size

      373KB

    • MD5

      f41a56c0b5baf138fceef831cac9055b

    • SHA1

      e9d13eba17aa2114dab97fe45559b5904e8bdb69

    • SHA256

      fa339d418e0036788b009ad3e7e77bfbca237f307f5422f2db9ce554c35ee78d

    • SHA512

      616b69e54fb1dc4da7c89c26b42e17943f69e11a88221879236073a6cc4c51f6033cdb881d68f3547cab1e963fb8fe02fab598379fbcd6037fee7c95aa7270a4

    • SSDEEP

      6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks