General

  • Target

    3490aecf62f075ea6e3fa0c9132e7408999990eb0d19cba6ba9d4dac923bc035

  • Size

    297KB

  • Sample

    241105-cvjesssejc

  • MD5

    a85088b0a2686885ca1294a63112dab4

  • SHA1

    64fb1523ec9c01efedfbda4d7afa5adea9bdb550

  • SHA256

    3490aecf62f075ea6e3fa0c9132e7408999990eb0d19cba6ba9d4dac923bc035

  • SHA512

    9e0c8eec13b8553010efb7cc713af03ec163faae27b653a2b4ce9e914f16dc693c23aa617749bd215a383d31b1f3f2349f56f9bb68d166bd8811cefd67d8b1bc

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      3490aecf62f075ea6e3fa0c9132e7408999990eb0d19cba6ba9d4dac923bc035

    • Size

      297KB

    • MD5

      a85088b0a2686885ca1294a63112dab4

    • SHA1

      64fb1523ec9c01efedfbda4d7afa5adea9bdb550

    • SHA256

      3490aecf62f075ea6e3fa0c9132e7408999990eb0d19cba6ba9d4dac923bc035

    • SHA512

      9e0c8eec13b8553010efb7cc713af03ec163faae27b653a2b4ce9e914f16dc693c23aa617749bd215a383d31b1f3f2349f56f9bb68d166bd8811cefd67d8b1bc

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks