General

  • Target

    24cd6d6278b2ceb42941680b834047a27a444b0d3056b8ef7d297f23927b6c03

  • Size

    438KB

  • Sample

    241105-k3e2ca1kfm

  • MD5

    cdbd2bffac1df02c0d2267c5b3844602

  • SHA1

    1b2133af5f34119e64cabc71bbcc9266667a1dcb

  • SHA256

    24cd6d6278b2ceb42941680b834047a27a444b0d3056b8ef7d297f23927b6c03

  • SHA512

    235448ffa3e85ea87bd40b38088a10350d4f358b6aecbb3507139952d7a9907a7f80af1f98a9b6071826f67f73cb344ea5a3ba9cf45c3e83606c46116c4ca6e1

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      24cd6d6278b2ceb42941680b834047a27a444b0d3056b8ef7d297f23927b6c03

    • Size

      438KB

    • MD5

      cdbd2bffac1df02c0d2267c5b3844602

    • SHA1

      1b2133af5f34119e64cabc71bbcc9266667a1dcb

    • SHA256

      24cd6d6278b2ceb42941680b834047a27a444b0d3056b8ef7d297f23927b6c03

    • SHA512

      235448ffa3e85ea87bd40b38088a10350d4f358b6aecbb3507139952d7a9907a7f80af1f98a9b6071826f67f73cb344ea5a3ba9cf45c3e83606c46116c4ca6e1

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks