General

  • Target

    58a0ab30c2617789923308f02b6e60c0d115e6cd403ee3f5eb5e97d841d54da0

  • Size

    383KB

  • Sample

    241105-kbkgraxfqb

  • MD5

    d2ce919b4b2046a2cee9222197286903

  • SHA1

    6f7d203d5b67b5881962cb5c668e32c5291f6845

  • SHA256

    58a0ab30c2617789923308f02b6e60c0d115e6cd403ee3f5eb5e97d841d54da0

  • SHA512

    5a2652dd3c8e746d4c07c9b37ee43d0dfe3dee83e79a48cf005589f5ebbabde86d5372995942b30b26d9c5ec6449b56908456a4c528b06c4ef9355a57267dac6

  • SSDEEP

    6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      58a0ab30c2617789923308f02b6e60c0d115e6cd403ee3f5eb5e97d841d54da0

    • Size

      383KB

    • MD5

      d2ce919b4b2046a2cee9222197286903

    • SHA1

      6f7d203d5b67b5881962cb5c668e32c5291f6845

    • SHA256

      58a0ab30c2617789923308f02b6e60c0d115e6cd403ee3f5eb5e97d841d54da0

    • SHA512

      5a2652dd3c8e746d4c07c9b37ee43d0dfe3dee83e79a48cf005589f5ebbabde86d5372995942b30b26d9c5ec6449b56908456a4c528b06c4ef9355a57267dac6

    • SSDEEP

      6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks