General

  • Target

    7d9cd2f2e69747e5a20969346c636af41b29627792cdb63eb22481d0432f9469

  • Size

    438KB

  • Sample

    241111-mxr5tsxnht

  • MD5

    c21aac79d9ba60f5626da364f25f4af5

  • SHA1

    df4f22c666d59f47b1637c37f1c8bb131bb9b2f6

  • SHA256

    7d9cd2f2e69747e5a20969346c636af41b29627792cdb63eb22481d0432f9469

  • SHA512

    907d1aa3f72ad5fe50e458d58a2817b26c99ff5c3755fcc4578c04521b19e1812765332cadea9a22f77908c02b0f9c65709a28288734403cd7545c9bd2af73ea

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7d9cd2f2e69747e5a20969346c636af41b29627792cdb63eb22481d0432f9469

    • Size

      438KB

    • MD5

      c21aac79d9ba60f5626da364f25f4af5

    • SHA1

      df4f22c666d59f47b1637c37f1c8bb131bb9b2f6

    • SHA256

      7d9cd2f2e69747e5a20969346c636af41b29627792cdb63eb22481d0432f9469

    • SHA512

      907d1aa3f72ad5fe50e458d58a2817b26c99ff5c3755fcc4578c04521b19e1812765332cadea9a22f77908c02b0f9c65709a28288734403cd7545c9bd2af73ea

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks