General

  • Target

    2d383b6e9bfaa2b402451b7c0cb7eb17541d20a497176c477d8fcd9d35165010

  • Size

    423KB

  • Sample

    241105-hgr3nswfrf

  • MD5

    d06bda686fbc757b114727fa15248d8e

  • SHA1

    08086865e6c19513083a803de5720ccfbb31d693

  • SHA256

    2d383b6e9bfaa2b402451b7c0cb7eb17541d20a497176c477d8fcd9d35165010

  • SHA512

    43180747dca0490069be99d55ecd127e9f177117b52a401aed857a4c1fb6c85c2d49d300cb18f24cc612644ca3ba4a0e4c601a98266e6c2de3d0b358f1f39612

  • SSDEEP

    6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2d383b6e9bfaa2b402451b7c0cb7eb17541d20a497176c477d8fcd9d35165010

    • Size

      423KB

    • MD5

      d06bda686fbc757b114727fa15248d8e

    • SHA1

      08086865e6c19513083a803de5720ccfbb31d693

    • SHA256

      2d383b6e9bfaa2b402451b7c0cb7eb17541d20a497176c477d8fcd9d35165010

    • SHA512

      43180747dca0490069be99d55ecd127e9f177117b52a401aed857a4c1fb6c85c2d49d300cb18f24cc612644ca3ba4a0e4c601a98266e6c2de3d0b358f1f39612

    • SSDEEP

      6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks