General

  • Target

    012a255e78522c0d95f0bc4f6d5cb7b17a75630c2b3cc0bc652b5e33a67fe2f8

  • Size

    438KB

  • Sample

    241104-srd9nsvkfr

  • MD5

    79b34a037f83f04f8b75aa669a8a8854

  • SHA1

    d6654edc3597be17126a986476f17ad8152dad82

  • SHA256

    012a255e78522c0d95f0bc4f6d5cb7b17a75630c2b3cc0bc652b5e33a67fe2f8

  • SHA512

    21e1abfd698294bccc23ca0f45f6c741c6893cb31d9f333a0fcdc6dc0bb9479d2869cba72a697a9657cb8267f72944ece02b1aad07ee2638ec2be497471b039a

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      012a255e78522c0d95f0bc4f6d5cb7b17a75630c2b3cc0bc652b5e33a67fe2f8

    • Size

      438KB

    • MD5

      79b34a037f83f04f8b75aa669a8a8854

    • SHA1

      d6654edc3597be17126a986476f17ad8152dad82

    • SHA256

      012a255e78522c0d95f0bc4f6d5cb7b17a75630c2b3cc0bc652b5e33a67fe2f8

    • SHA512

      21e1abfd698294bccc23ca0f45f6c741c6893cb31d9f333a0fcdc6dc0bb9479d2869cba72a697a9657cb8267f72944ece02b1aad07ee2638ec2be497471b039a

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks