General

  • Target

    311d3d0c724997ba21d0b8508763c2d9798f59fcbfa862fe024792affb68d1a5

  • Size

    297KB

  • Sample

    241105-nkt94a1crp

  • MD5

    23fbdec46f7bad334f4d3cca7bdfd3fc

  • SHA1

    246237443c411aba665ab4866bcaaa40daaba02c

  • SHA256

    311d3d0c724997ba21d0b8508763c2d9798f59fcbfa862fe024792affb68d1a5

  • SHA512

    b4d25d83e4860f277e9d3288aee4a749c78c500c9e5f5b0f3a3230fb14292490ecdc723847c34c53c581015332d26655cef6ad0127be3933a87b147cdddabd85

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      311d3d0c724997ba21d0b8508763c2d9798f59fcbfa862fe024792affb68d1a5

    • Size

      297KB

    • MD5

      23fbdec46f7bad334f4d3cca7bdfd3fc

    • SHA1

      246237443c411aba665ab4866bcaaa40daaba02c

    • SHA256

      311d3d0c724997ba21d0b8508763c2d9798f59fcbfa862fe024792affb68d1a5

    • SHA512

      b4d25d83e4860f277e9d3288aee4a749c78c500c9e5f5b0f3a3230fb14292490ecdc723847c34c53c581015332d26655cef6ad0127be3933a87b147cdddabd85

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks