General

  • Target

    048a607ce6f9ccd2334089c48e58dbf7548c0f13aa56d26eb23bb0bd6ea58bbd

  • Size

    438KB

  • Sample

    241104-16cnds1lal

  • MD5

    1352e3f2d65d3a73106ddf3960c5f224

  • SHA1

    65e130cbfe7ad1e4baabedb4e682fa9692d8945a

  • SHA256

    048a607ce6f9ccd2334089c48e58dbf7548c0f13aa56d26eb23bb0bd6ea58bbd

  • SHA512

    57a82d7e035a1e95e5ced9432359477f15fc580246ecde16a183383b492938e987be64d2ce6ba181a0f49041a85b489f2362d8fdf9dd8ecc952a2397567ae663

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      048a607ce6f9ccd2334089c48e58dbf7548c0f13aa56d26eb23bb0bd6ea58bbd

    • Size

      438KB

    • MD5

      1352e3f2d65d3a73106ddf3960c5f224

    • SHA1

      65e130cbfe7ad1e4baabedb4e682fa9692d8945a

    • SHA256

      048a607ce6f9ccd2334089c48e58dbf7548c0f13aa56d26eb23bb0bd6ea58bbd

    • SHA512

      57a82d7e035a1e95e5ced9432359477f15fc580246ecde16a183383b492938e987be64d2ce6ba181a0f49041a85b489f2362d8fdf9dd8ecc952a2397567ae663

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks