General

  • Target

    98ce3cfcdc1ae8e0a524e2dfde2fe30674e2e8994cff61592b40933defbc1a84

  • Size

    297KB

  • Sample

    241111-g9mszsyjbq

  • MD5

    f0550bd0096ebb579bfe8c62e480b223

  • SHA1

    0b3db5f7b9f0edd1d28859215d72b5bad4d16d73

  • SHA256

    98ce3cfcdc1ae8e0a524e2dfde2fe30674e2e8994cff61592b40933defbc1a84

  • SHA512

    147cca9eba5ddc56ee1bd2e1d5553701ffebc4da167e1832969d5fd3a66dbc8d110d5288cb3d3886301169d673b475dcbb47dbc8ba97f37af1f18de244cfd7bc

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      98ce3cfcdc1ae8e0a524e2dfde2fe30674e2e8994cff61592b40933defbc1a84

    • Size

      297KB

    • MD5

      f0550bd0096ebb579bfe8c62e480b223

    • SHA1

      0b3db5f7b9f0edd1d28859215d72b5bad4d16d73

    • SHA256

      98ce3cfcdc1ae8e0a524e2dfde2fe30674e2e8994cff61592b40933defbc1a84

    • SHA512

      147cca9eba5ddc56ee1bd2e1d5553701ffebc4da167e1832969d5fd3a66dbc8d110d5288cb3d3886301169d673b475dcbb47dbc8ba97f37af1f18de244cfd7bc

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks