General

  • Target

    4ea0edd76b17cd00e74a223d311877d10a29e9777b1185c15471836fa05c4d0c

  • Size

    442KB

  • Sample

    241104-xbebystrdz

  • MD5

    fd9025c4d72a72410143ace9de1c2bb5

  • SHA1

    ca071176a19fe021743f5cd1de73716a5fa65d89

  • SHA256

    4ea0edd76b17cd00e74a223d311877d10a29e9777b1185c15471836fa05c4d0c

  • SHA512

    37a29de7e1a8b016b973b67c84cd4e5a4559c0c91996d3ccebdeb4b3556892ac56a42f3190dd4c8580b255f3dc080000c37bb0c0602c41072a272dbb3be4ed40

  • SSDEEP

    6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      4ea0edd76b17cd00e74a223d311877d10a29e9777b1185c15471836fa05c4d0c

    • Size

      442KB

    • MD5

      fd9025c4d72a72410143ace9de1c2bb5

    • SHA1

      ca071176a19fe021743f5cd1de73716a5fa65d89

    • SHA256

      4ea0edd76b17cd00e74a223d311877d10a29e9777b1185c15471836fa05c4d0c

    • SHA512

      37a29de7e1a8b016b973b67c84cd4e5a4559c0c91996d3ccebdeb4b3556892ac56a42f3190dd4c8580b255f3dc080000c37bb0c0602c41072a272dbb3be4ed40

    • SSDEEP

      6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks