General

  • Target

    a0345944ed86874362976a0c73dbfa6fc7c5eab1373ac3f84fc12d61ce1d8410

  • Size

    438KB

  • Sample

    241105-exhmdsxjcl

  • MD5

    9415a2808e8d193dec15e57b463aae14

  • SHA1

    2dba66f840bb4e9ac0ab90eb75b99a428880decd

  • SHA256

    a0345944ed86874362976a0c73dbfa6fc7c5eab1373ac3f84fc12d61ce1d8410

  • SHA512

    0a7ae5531cec725f64279d3331e26d839baaeb4870eccc4f51a1ee94d873426e21f42f770169221ee3a971eda7f60d1c77319ceda4840100e56c14e3c1dae637

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a0345944ed86874362976a0c73dbfa6fc7c5eab1373ac3f84fc12d61ce1d8410

    • Size

      438KB

    • MD5

      9415a2808e8d193dec15e57b463aae14

    • SHA1

      2dba66f840bb4e9ac0ab90eb75b99a428880decd

    • SHA256

      a0345944ed86874362976a0c73dbfa6fc7c5eab1373ac3f84fc12d61ce1d8410

    • SHA512

      0a7ae5531cec725f64279d3331e26d839baaeb4870eccc4f51a1ee94d873426e21f42f770169221ee3a971eda7f60d1c77319ceda4840100e56c14e3c1dae637

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks