General

  • Target

    14470b61dfe861449647605c17656bc999e016d2f630fbca187f9c83bb7e3d00

  • Size

    423KB

  • Sample

    241104-rhk57azpds

  • MD5

    417ea0bdcf25848810f7802c62a3f4a1

  • SHA1

    d8b060022e32ca19f902a57e4778db67997409dc

  • SHA256

    14470b61dfe861449647605c17656bc999e016d2f630fbca187f9c83bb7e3d00

  • SHA512

    25d820834a5e4b7cc20e610edbe10f802138cd26ee2fc8ec8fb5c3ccc765089671bd18a20a63a9738ceb68da21dc562b22555a62c8f9ec111464b3a94700b51f

  • SSDEEP

    12288:u4rXu0OVUf2Au746adZtIzkNDtZuFM9bT6f+N:1lOG2tJ89tMUI+

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      14470b61dfe861449647605c17656bc999e016d2f630fbca187f9c83bb7e3d00

    • Size

      423KB

    • MD5

      417ea0bdcf25848810f7802c62a3f4a1

    • SHA1

      d8b060022e32ca19f902a57e4778db67997409dc

    • SHA256

      14470b61dfe861449647605c17656bc999e016d2f630fbca187f9c83bb7e3d00

    • SHA512

      25d820834a5e4b7cc20e610edbe10f802138cd26ee2fc8ec8fb5c3ccc765089671bd18a20a63a9738ceb68da21dc562b22555a62c8f9ec111464b3a94700b51f

    • SSDEEP

      12288:u4rXu0OVUf2Au746adZtIzkNDtZuFM9bT6f+N:1lOG2tJ89tMUI+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks