General

  • Target

    f9a9239ade994a90c7f9393c00bbc61e2b512c8319679e60ead0bc6d96655860

  • Size

    423KB

  • Sample

    241105-l5swnazelr

  • MD5

    0a8a104a6bffb1f308be476f9f660ec9

  • SHA1

    5dc8af1aeb3347ab881e702a9034b8d787bf696d

  • SHA256

    f9a9239ade994a90c7f9393c00bbc61e2b512c8319679e60ead0bc6d96655860

  • SHA512

    37f8bd1c76d21eafa0b80c48f07ac51abe7d4c4452b48e88ab6f7ccf9065958405802330d94878cf74d4d812309acadf681e76ca9e46702d577868421b0f47c1

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f9a9239ade994a90c7f9393c00bbc61e2b512c8319679e60ead0bc6d96655860

    • Size

      423KB

    • MD5

      0a8a104a6bffb1f308be476f9f660ec9

    • SHA1

      5dc8af1aeb3347ab881e702a9034b8d787bf696d

    • SHA256

      f9a9239ade994a90c7f9393c00bbc61e2b512c8319679e60ead0bc6d96655860

    • SHA512

      37f8bd1c76d21eafa0b80c48f07ac51abe7d4c4452b48e88ab6f7ccf9065958405802330d94878cf74d4d812309acadf681e76ca9e46702d577868421b0f47c1

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks