General

  • Target

    ac43a871c0cb0732474d5687d63224c4ac873adf7fd3e2db038a9df3db79df20

  • Size

    383KB

  • Sample

    241104-wyeqkavcld

  • MD5

    38e02546293c433c4c1a1d2d41d7ef14

  • SHA1

    24a829ec7cf388bdb6c8273cb23b18f81751cf39

  • SHA256

    ac43a871c0cb0732474d5687d63224c4ac873adf7fd3e2db038a9df3db79df20

  • SHA512

    9924870e698eff43553b774f898ccb0733c6a32939581329dd52ec2cf7913ceff65303b048feb85129f541dac7c2b698b94aeccb787f8beaa47be5f60d26a9d9

  • SSDEEP

    6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      ac43a871c0cb0732474d5687d63224c4ac873adf7fd3e2db038a9df3db79df20

    • Size

      383KB

    • MD5

      38e02546293c433c4c1a1d2d41d7ef14

    • SHA1

      24a829ec7cf388bdb6c8273cb23b18f81751cf39

    • SHA256

      ac43a871c0cb0732474d5687d63224c4ac873adf7fd3e2db038a9df3db79df20

    • SHA512

      9924870e698eff43553b774f898ccb0733c6a32939581329dd52ec2cf7913ceff65303b048feb85129f541dac7c2b698b94aeccb787f8beaa47be5f60d26a9d9

    • SSDEEP

      6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks