General

  • Target

    895884241aab3f4945bcbc54d667d289d053696dab359e90b006d3df1d538bd0

  • Size

    423KB

  • Sample

    241105-cybjcstbkn

  • MD5

    96caa25cf79ac4322c99a68e60516ae8

  • SHA1

    eb89a3c89d0dc918eb09621ec6455ea9bada30a0

  • SHA256

    895884241aab3f4945bcbc54d667d289d053696dab359e90b006d3df1d538bd0

  • SHA512

    3e231f5fd9c60f0e14585e82f5a69284d8a342b57db5a4d514fb629b1293c9c3c1441b1fea177eeb2898d395c907f69a0fd2fa70aa8ab78f2bd8eb47c436a263

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      895884241aab3f4945bcbc54d667d289d053696dab359e90b006d3df1d538bd0

    • Size

      423KB

    • MD5

      96caa25cf79ac4322c99a68e60516ae8

    • SHA1

      eb89a3c89d0dc918eb09621ec6455ea9bada30a0

    • SHA256

      895884241aab3f4945bcbc54d667d289d053696dab359e90b006d3df1d538bd0

    • SHA512

      3e231f5fd9c60f0e14585e82f5a69284d8a342b57db5a4d514fb629b1293c9c3c1441b1fea177eeb2898d395c907f69a0fd2fa70aa8ab78f2bd8eb47c436a263

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks