General

  • Target

    b35e2a33d2a477c9670d92b050fb0e8b06a1a29087881514eeeda5fce17de629

  • Size

    371KB

  • Sample

    241105-hdwlpayqck

  • MD5

    d25722676a66e72d10bac071955c960c

  • SHA1

    9eebb156524c2de0fcfe829eeeee755b18f70577

  • SHA256

    b35e2a33d2a477c9670d92b050fb0e8b06a1a29087881514eeeda5fce17de629

  • SHA512

    0dc4e463382b3525ea4b227e79f86192487ff14190a6084aab8b1bd75581a44ca0a99f5733db560ec40ef0e428f5409f80121f7cd30025a58be39075afed4e6e

  • SSDEEP

    6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      b35e2a33d2a477c9670d92b050fb0e8b06a1a29087881514eeeda5fce17de629

    • Size

      371KB

    • MD5

      d25722676a66e72d10bac071955c960c

    • SHA1

      9eebb156524c2de0fcfe829eeeee755b18f70577

    • SHA256

      b35e2a33d2a477c9670d92b050fb0e8b06a1a29087881514eeeda5fce17de629

    • SHA512

      0dc4e463382b3525ea4b227e79f86192487ff14190a6084aab8b1bd75581a44ca0a99f5733db560ec40ef0e428f5409f80121f7cd30025a58be39075afed4e6e

    • SSDEEP

      6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks