General

  • Target

    ed172bf72a02b3177ca648d3a3ef59d48ca570fcbab1ca71a68a04270e76a90a

  • Size

    442KB

  • Sample

    241105-esttvswrem

  • MD5

    a10731aa78a4e9f3251a6af0e314bf28

  • SHA1

    286f0a9a8f2638fda0ff3a08d22427450678046c

  • SHA256

    ed172bf72a02b3177ca648d3a3ef59d48ca570fcbab1ca71a68a04270e76a90a

  • SHA512

    3c0f18c3ea29e4125f40067da504f18bdbfe510464a48b02ef8fe3d2efa275ef367f5a735220a8334231b54c9d5a0d2c7c3fdbbae1464c9e4742badbda6cf569

  • SSDEEP

    6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      ed172bf72a02b3177ca648d3a3ef59d48ca570fcbab1ca71a68a04270e76a90a

    • Size

      442KB

    • MD5

      a10731aa78a4e9f3251a6af0e314bf28

    • SHA1

      286f0a9a8f2638fda0ff3a08d22427450678046c

    • SHA256

      ed172bf72a02b3177ca648d3a3ef59d48ca570fcbab1ca71a68a04270e76a90a

    • SHA512

      3c0f18c3ea29e4125f40067da504f18bdbfe510464a48b02ef8fe3d2efa275ef367f5a735220a8334231b54c9d5a0d2c7c3fdbbae1464c9e4742badbda6cf569

    • SSDEEP

      6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks