General

  • Target

    bb5bc9150e0d012c95c35924987f499fabcbf1eac1b2c7668846b870331ba6fd

  • Size

    346KB

  • Sample

    241111-gqrylaxpfq

  • MD5

    1e95b677b86052d8092efca9b6675c9b

  • SHA1

    f70567e13996b55d432f9479e83b3834db805855

  • SHA256

    bb5bc9150e0d012c95c35924987f499fabcbf1eac1b2c7668846b870331ba6fd

  • SHA512

    fc421e60b60af90b9b33e9867d3e62385de8041b655e65fbde402d13a36c54081e704a59702838dc8b95009c6edf10dd54d160c7bede18dbd822af4efa0aa48b

  • SSDEEP

    6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      bb5bc9150e0d012c95c35924987f499fabcbf1eac1b2c7668846b870331ba6fd

    • Size

      346KB

    • MD5

      1e95b677b86052d8092efca9b6675c9b

    • SHA1

      f70567e13996b55d432f9479e83b3834db805855

    • SHA256

      bb5bc9150e0d012c95c35924987f499fabcbf1eac1b2c7668846b870331ba6fd

    • SHA512

      fc421e60b60af90b9b33e9867d3e62385de8041b655e65fbde402d13a36c54081e704a59702838dc8b95009c6edf10dd54d160c7bede18dbd822af4efa0aa48b

    • SSDEEP

      6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks