General

  • Target

    e6bfecbd3d3f05aabb1c2b81eb56be582ec628b27454466de464c7043b44fcc0

  • Size

    371KB

  • Sample

    241111-feyrbssmes

  • MD5

    418e23822742fbadb14d5646fbe29efe

  • SHA1

    521860e119cbf8f71a0136057878de3f30b86a2b

  • SHA256

    e6bfecbd3d3f05aabb1c2b81eb56be582ec628b27454466de464c7043b44fcc0

  • SHA512

    29266c8c8fda59ef4874ad5c14bf228d021a54b5cb7b0e50563aecb0ab8526d3ba7065e9e86084dcb3e876fdbe13926c8682fb3803f2642c7a6c39a1ec267368

  • SSDEEP

    6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      e6bfecbd3d3f05aabb1c2b81eb56be582ec628b27454466de464c7043b44fcc0

    • Size

      371KB

    • MD5

      418e23822742fbadb14d5646fbe29efe

    • SHA1

      521860e119cbf8f71a0136057878de3f30b86a2b

    • SHA256

      e6bfecbd3d3f05aabb1c2b81eb56be582ec628b27454466de464c7043b44fcc0

    • SHA512

      29266c8c8fda59ef4874ad5c14bf228d021a54b5cb7b0e50563aecb0ab8526d3ba7065e9e86084dcb3e876fdbe13926c8682fb3803f2642c7a6c39a1ec267368

    • SSDEEP

      6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks