General

  • Target

    54ab7f37554cf10c370626b733125818ef32c4dddcd48bdc68fda85eff23720a

  • Size

    438KB

  • Sample

    241104-tx94zatcnm

  • MD5

    71ef76ba6092bca2838ce63a5386cf88

  • SHA1

    4d5772f6b10af10bc8e70fdb2858fb04f66b7b84

  • SHA256

    54ab7f37554cf10c370626b733125818ef32c4dddcd48bdc68fda85eff23720a

  • SHA512

    7bdcf85f970f9d2eaab703c45ac6ee2325fd57121cb29cfdea1219bfe9e4156c778fae445ba98e644912ff8661fc828bb35f737adbdc5a0c718fb956273997b1

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      54ab7f37554cf10c370626b733125818ef32c4dddcd48bdc68fda85eff23720a

    • Size

      438KB

    • MD5

      71ef76ba6092bca2838ce63a5386cf88

    • SHA1

      4d5772f6b10af10bc8e70fdb2858fb04f66b7b84

    • SHA256

      54ab7f37554cf10c370626b733125818ef32c4dddcd48bdc68fda85eff23720a

    • SHA512

      7bdcf85f970f9d2eaab703c45ac6ee2325fd57121cb29cfdea1219bfe9e4156c778fae445ba98e644912ff8661fc828bb35f737adbdc5a0c718fb956273997b1

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks