General

  • Target

    e3b095fd630f094617f8e19da82d1aa66cb2632263a131b6bf48a369a042645d

  • Size

    371KB

  • Sample

    241105-1z9dsaypbx

  • MD5

    20824ee84d576b6f51e2d8685d405603

  • SHA1

    455fdf89d265d829aab0ecb90aa97f72a33d2607

  • SHA256

    e3b095fd630f094617f8e19da82d1aa66cb2632263a131b6bf48a369a042645d

  • SHA512

    e61f79e86479df7068c1d587cc5205231b3fe50233a792efd6bd13a7164600176dcdd13c51b3512ddcc3e6bc6782a8c7d287c073eb08559b34f76a0d4970e8bc

  • SSDEEP

    6144:I1c95HIATYxl4z3GTkAe0YnGDw2IKcO/w+XiILU6dqb7ITsqXigaXwVfi:I1c95H7TYrCYkAepCw2oOI4kL7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      e3b095fd630f094617f8e19da82d1aa66cb2632263a131b6bf48a369a042645d

    • Size

      371KB

    • MD5

      20824ee84d576b6f51e2d8685d405603

    • SHA1

      455fdf89d265d829aab0ecb90aa97f72a33d2607

    • SHA256

      e3b095fd630f094617f8e19da82d1aa66cb2632263a131b6bf48a369a042645d

    • SHA512

      e61f79e86479df7068c1d587cc5205231b3fe50233a792efd6bd13a7164600176dcdd13c51b3512ddcc3e6bc6782a8c7d287c073eb08559b34f76a0d4970e8bc

    • SSDEEP

      6144:I1c95HIATYxl4z3GTkAe0YnGDw2IKcO/w+XiILU6dqb7ITsqXigaXwVfi:I1c95H7TYrCYkAepCw2oOI4kL7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks