General

  • Target

    40902bd8f06b012f24d88d319c1816c4e47a2b3b2dd24e5fa8c0715ea5549110

  • Size

    442KB

  • Sample

    241105-m2a24syqay

  • MD5

    e44e52c3b3716982c6aa95c497596db0

  • SHA1

    1dbc602aa967c9868ab654ed4f4052647ca0a0e8

  • SHA256

    40902bd8f06b012f24d88d319c1816c4e47a2b3b2dd24e5fa8c0715ea5549110

  • SHA512

    809995e09fd0b9defa5354be98e57fc0773b975e91def48d4d267981a880482b7104a0f60f17396dde73d4599abb94a83ba6b61c9d50d2f9b18eeee15a60a55c

  • SSDEEP

    6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      40902bd8f06b012f24d88d319c1816c4e47a2b3b2dd24e5fa8c0715ea5549110

    • Size

      442KB

    • MD5

      e44e52c3b3716982c6aa95c497596db0

    • SHA1

      1dbc602aa967c9868ab654ed4f4052647ca0a0e8

    • SHA256

      40902bd8f06b012f24d88d319c1816c4e47a2b3b2dd24e5fa8c0715ea5549110

    • SHA512

      809995e09fd0b9defa5354be98e57fc0773b975e91def48d4d267981a880482b7104a0f60f17396dde73d4599abb94a83ba6b61c9d50d2f9b18eeee15a60a55c

    • SSDEEP

      6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks