General

  • Target

    3cb758efd8057e786cdb0e05819b486ac7c3e4cb28733322c0b5be3eed90e7b8

  • Size

    371KB

  • Sample

    241105-g5ralswjct

  • MD5

    782d7b13787ac10c0de4b9edd010c2e0

  • SHA1

    afcb058e47e2c9a683687d461a33465b555e502b

  • SHA256

    3cb758efd8057e786cdb0e05819b486ac7c3e4cb28733322c0b5be3eed90e7b8

  • SHA512

    2fa751192d65c759ceb48383900e9d037c1a0477765228ac701383e1386af575c4a2e5711b0cfeb3c25007dd82359676d111cd823c34049107b54e5e7079971b

  • SSDEEP

    6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      3cb758efd8057e786cdb0e05819b486ac7c3e4cb28733322c0b5be3eed90e7b8

    • Size

      371KB

    • MD5

      782d7b13787ac10c0de4b9edd010c2e0

    • SHA1

      afcb058e47e2c9a683687d461a33465b555e502b

    • SHA256

      3cb758efd8057e786cdb0e05819b486ac7c3e4cb28733322c0b5be3eed90e7b8

    • SHA512

      2fa751192d65c759ceb48383900e9d037c1a0477765228ac701383e1386af575c4a2e5711b0cfeb3c25007dd82359676d111cd823c34049107b54e5e7079971b

    • SSDEEP

      6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks