General

  • Target

    1b2b591246f2ecc959b8cc450937f5dbc0d47ed2a675a0c9fb979f63ca2d71f5

  • Size

    297KB

  • Sample

    241105-jwwj3sxdrf

  • MD5

    995c11d4f31d22de9273ce8ec8ec5e01

  • SHA1

    3cdeb55d9390b0a2f3345b30c17298e7914d2989

  • SHA256

    1b2b591246f2ecc959b8cc450937f5dbc0d47ed2a675a0c9fb979f63ca2d71f5

  • SHA512

    578d8c5c4d0c86e53945c30f273da755986ff4ab4fdae68a13b611ecb27b8486341d398ba1c9c80cf7d12b2db6ad820fda58ba69894bf2d516708e4722bc868a

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      1b2b591246f2ecc959b8cc450937f5dbc0d47ed2a675a0c9fb979f63ca2d71f5

    • Size

      297KB

    • MD5

      995c11d4f31d22de9273ce8ec8ec5e01

    • SHA1

      3cdeb55d9390b0a2f3345b30c17298e7914d2989

    • SHA256

      1b2b591246f2ecc959b8cc450937f5dbc0d47ed2a675a0c9fb979f63ca2d71f5

    • SHA512

      578d8c5c4d0c86e53945c30f273da755986ff4ab4fdae68a13b611ecb27b8486341d398ba1c9c80cf7d12b2db6ad820fda58ba69894bf2d516708e4722bc868a

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks