General

  • Target

    d29893ca531679f4e664ff9c4240e7cb261a7c4501a33b7c69407a4dc84593b1

  • Size

    370KB

  • Sample

    241105-1bhwxsyerg

  • MD5

    b17a6d2553dc6170181c9410241c7043

  • SHA1

    19b2d6eb7f20a0f282ac36d13ebd4917058502ea

  • SHA256

    d29893ca531679f4e664ff9c4240e7cb261a7c4501a33b7c69407a4dc84593b1

  • SHA512

    a6ad584d532dbe0ba80ff049c563557c010cefac37b640dd9d355d6f486b14ac86ebec0ae02d1a1d0c48b0a754988d59447b214b7033717eecab390fd9f99abb

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d29893ca531679f4e664ff9c4240e7cb261a7c4501a33b7c69407a4dc84593b1

    • Size

      370KB

    • MD5

      b17a6d2553dc6170181c9410241c7043

    • SHA1

      19b2d6eb7f20a0f282ac36d13ebd4917058502ea

    • SHA256

      d29893ca531679f4e664ff9c4240e7cb261a7c4501a33b7c69407a4dc84593b1

    • SHA512

      a6ad584d532dbe0ba80ff049c563557c010cefac37b640dd9d355d6f486b14ac86ebec0ae02d1a1d0c48b0a754988d59447b214b7033717eecab390fd9f99abb

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks