General

  • Target

    557826f4520f3d5d65e734b73d92d8cda67d287765dd24aa50efc4e8138c2fdb

  • Size

    423KB

  • Sample

    241104-rk3s1szpfx

  • MD5

    3cfe4378367284e06e1211414e6b85b8

  • SHA1

    57d74011e4d4d1b141b37439cec3d0aed3e54c32

  • SHA256

    557826f4520f3d5d65e734b73d92d8cda67d287765dd24aa50efc4e8138c2fdb

  • SHA512

    4f6917f23a37fa942cc43ee4012e214931cbd48d015ff6dd7442f3a27b7f57d2b48bd995eb332d5b245b39d68839ce0d6750a03ca31fc22a0c1e74bed191f10f

  • SSDEEP

    6144:cMui5ObVmy+0LExccD4HOCL+qzPI1vCyuKkYi82Jzj6efYPV0p:GrLExjiOCyqzPI1vCyuKkBJzjL

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      557826f4520f3d5d65e734b73d92d8cda67d287765dd24aa50efc4e8138c2fdb

    • Size

      423KB

    • MD5

      3cfe4378367284e06e1211414e6b85b8

    • SHA1

      57d74011e4d4d1b141b37439cec3d0aed3e54c32

    • SHA256

      557826f4520f3d5d65e734b73d92d8cda67d287765dd24aa50efc4e8138c2fdb

    • SHA512

      4f6917f23a37fa942cc43ee4012e214931cbd48d015ff6dd7442f3a27b7f57d2b48bd995eb332d5b245b39d68839ce0d6750a03ca31fc22a0c1e74bed191f10f

    • SSDEEP

      6144:cMui5ObVmy+0LExccD4HOCL+qzPI1vCyuKkYi82Jzj6efYPV0p:GrLExjiOCyqzPI1vCyuKkBJzjL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks