General

  • Target

    a3f08e22565f43cb546fa92d1ffc20aece07b6da688d227d0e6557e7d93831ca

  • Size

    298KB

  • Sample

    241104-tbdhwa1rdw

  • MD5

    b1a1e28c1528e079a303b53d51e5372b

  • SHA1

    2abf03d7be0bb6a278b90a979f1b556e9124a958

  • SHA256

    a3f08e22565f43cb546fa92d1ffc20aece07b6da688d227d0e6557e7d93831ca

  • SHA512

    2891c34ff2d4dfa46758bb7c12bb8ba52ad66aa72dd2593f9b6f0ecd1a3cc42e2671d9a0ba869087457228d24dc5fdedb54541345a48539b2c0ede62bd25a6a0

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a3f08e22565f43cb546fa92d1ffc20aece07b6da688d227d0e6557e7d93831ca

    • Size

      298KB

    • MD5

      b1a1e28c1528e079a303b53d51e5372b

    • SHA1

      2abf03d7be0bb6a278b90a979f1b556e9124a958

    • SHA256

      a3f08e22565f43cb546fa92d1ffc20aece07b6da688d227d0e6557e7d93831ca

    • SHA512

      2891c34ff2d4dfa46758bb7c12bb8ba52ad66aa72dd2593f9b6f0ecd1a3cc42e2671d9a0ba869087457228d24dc5fdedb54541345a48539b2c0ede62bd25a6a0

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks