General

  • Target

    06393d3b47b6e63aebd339fb676f3177664d5be77b67ea435eaae890d8f5023e.exe

  • Size

    406KB

  • Sample

    241122-p9wpwsxjek

  • MD5

    49cd335379384ebf25b1dafd6530c322

  • SHA1

    9013c7d05b58437a379af80eb309551b28859f12

  • SHA256

    06393d3b47b6e63aebd339fb676f3177664d5be77b67ea435eaae890d8f5023e

  • SHA512

    8f8b1cbd8c465cdc2e10e75747dcff86132f43c14b959264be3ad61609e04312bae79e332a98daf93871bb4bc10caa30b0dde5918e58b7cdd29fa071216a7b4f

  • SSDEEP

    12288:zt9HKnSjdzuv4+xXA9oNZg4Ej8S6ce8pq8P5:zTqnwdc4+lZI8zceC15

Malware Config

Extracted

Family

redline

Botnet

NEWPUB1

C2

45.9.20.182:46792

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      06393d3b47b6e63aebd339fb676f3177664d5be77b67ea435eaae890d8f5023e.exe

    • Size

      406KB

    • MD5

      49cd335379384ebf25b1dafd6530c322

    • SHA1

      9013c7d05b58437a379af80eb309551b28859f12

    • SHA256

      06393d3b47b6e63aebd339fb676f3177664d5be77b67ea435eaae890d8f5023e

    • SHA512

      8f8b1cbd8c465cdc2e10e75747dcff86132f43c14b959264be3ad61609e04312bae79e332a98daf93871bb4bc10caa30b0dde5918e58b7cdd29fa071216a7b4f

    • SSDEEP

      12288:zt9HKnSjdzuv4+xXA9oNZg4Ej8S6ce8pq8P5:zTqnwdc4+lZI8zceC15

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks