General

  • Target

    0908beec16c4722271a1d14c2bd1b11e57488e8bff0645e69559b95c045f774b

  • Size

    438KB

  • Sample

    241111-fmv1eatbpn

  • MD5

    5b91437e33f75018e01345e8b78a4f6f

  • SHA1

    ed019bb7359323ae6217eb79ba2d4deb493dd39d

  • SHA256

    0908beec16c4722271a1d14c2bd1b11e57488e8bff0645e69559b95c045f774b

  • SHA512

    d35ac4d33bc42b8cf6ea7d22efb3e04779ae354556c75b320324af0bd34b1e4df8b9ae56cc60bce63ed6e2cdb976b967e7cf312fad022367c363857af6136af2

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      0908beec16c4722271a1d14c2bd1b11e57488e8bff0645e69559b95c045f774b

    • Size

      438KB

    • MD5

      5b91437e33f75018e01345e8b78a4f6f

    • SHA1

      ed019bb7359323ae6217eb79ba2d4deb493dd39d

    • SHA256

      0908beec16c4722271a1d14c2bd1b11e57488e8bff0645e69559b95c045f774b

    • SHA512

      d35ac4d33bc42b8cf6ea7d22efb3e04779ae354556c75b320324af0bd34b1e4df8b9ae56cc60bce63ed6e2cdb976b967e7cf312fad022367c363857af6136af2

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks