General

  • Target

    afa8e268b708bd8d51d735e9e50a89bfe6280563a78631a5c035e56c7d884d81

  • Size

    297KB

  • Sample

    241104-rksm2s1fln

  • MD5

    bb03cd0111ff432f6cf3fd97491c55af

  • SHA1

    08c5584c2c37f34ee4b35128e9394a9ad1929e0e

  • SHA256

    afa8e268b708bd8d51d735e9e50a89bfe6280563a78631a5c035e56c7d884d81

  • SHA512

    a5318f50c9f686cfd700ec892c68dbcb2d9bf7903fd1adc9ce3f8f0aef8cf8b4afecf09f9bd2dd6029693173479c8b629b879bf59e78fccf3ec2df37680b5bc3

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      afa8e268b708bd8d51d735e9e50a89bfe6280563a78631a5c035e56c7d884d81

    • Size

      297KB

    • MD5

      bb03cd0111ff432f6cf3fd97491c55af

    • SHA1

      08c5584c2c37f34ee4b35128e9394a9ad1929e0e

    • SHA256

      afa8e268b708bd8d51d735e9e50a89bfe6280563a78631a5c035e56c7d884d81

    • SHA512

      a5318f50c9f686cfd700ec892c68dbcb2d9bf7903fd1adc9ce3f8f0aef8cf8b4afecf09f9bd2dd6029693173479c8b629b879bf59e78fccf3ec2df37680b5bc3

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks