General

  • Target

    5389c8eda0ff468ff8eb3239e02eb70756340d050784a5cfa8e41e21bba3d77f

  • Size

    438KB

  • Sample

    241105-nqgaeszgkb

  • MD5

    95a1484ca9d5e489164dfbe3a644c141

  • SHA1

    0f8b0bad01db3a3307939ee8a7efdd61f2e139fa

  • SHA256

    5389c8eda0ff468ff8eb3239e02eb70756340d050784a5cfa8e41e21bba3d77f

  • SHA512

    8be62fbb489ad36592f275fc06a91a60408ea6e26e2d847b4afe607c3f16b0c289b660facadc84c6579ce99d75928d5f9b811c853e460816eb207fd6dae28738

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      5389c8eda0ff468ff8eb3239e02eb70756340d050784a5cfa8e41e21bba3d77f

    • Size

      438KB

    • MD5

      95a1484ca9d5e489164dfbe3a644c141

    • SHA1

      0f8b0bad01db3a3307939ee8a7efdd61f2e139fa

    • SHA256

      5389c8eda0ff468ff8eb3239e02eb70756340d050784a5cfa8e41e21bba3d77f

    • SHA512

      8be62fbb489ad36592f275fc06a91a60408ea6e26e2d847b4afe607c3f16b0c289b660facadc84c6579ce99d75928d5f9b811c853e460816eb207fd6dae28738

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks