General

  • Target

    9ec3f02ea6fc7d88e44cd087c2f317ee47ea0a40f57312852a9473a45e16fc95

  • Size

    346KB

  • Sample

    241105-lw48bszdkj

  • MD5

    5ee0eb300be48b81bf9009637561bbbd

  • SHA1

    1d4aefbb820dac8f8632f509fe243e868ed971a5

  • SHA256

    9ec3f02ea6fc7d88e44cd087c2f317ee47ea0a40f57312852a9473a45e16fc95

  • SHA512

    41c1618e32e8163a38ae3785cdbcd735e62a6636f440ada41eb35b4094f0db0e6189771b0239d271eaded2a36ca19d730d94d9df7af1ab82dddf79148a7d23df

  • SSDEEP

    6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      9ec3f02ea6fc7d88e44cd087c2f317ee47ea0a40f57312852a9473a45e16fc95

    • Size

      346KB

    • MD5

      5ee0eb300be48b81bf9009637561bbbd

    • SHA1

      1d4aefbb820dac8f8632f509fe243e868ed971a5

    • SHA256

      9ec3f02ea6fc7d88e44cd087c2f317ee47ea0a40f57312852a9473a45e16fc95

    • SHA512

      41c1618e32e8163a38ae3785cdbcd735e62a6636f440ada41eb35b4094f0db0e6189771b0239d271eaded2a36ca19d730d94d9df7af1ab82dddf79148a7d23df

    • SSDEEP

      6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks