General

  • Target

    4b8a0f6e1d8ab227e89714f8edb6021a7a740affd374b0063cba77d109e5c4a4

  • Size

    383KB

  • Sample

    241105-ry9tgssgkc

  • MD5

    273a60b3f7deae8502257f8b051b7150

  • SHA1

    8625951852e3f48d87097b80b369daffb5bf505e

  • SHA256

    4b8a0f6e1d8ab227e89714f8edb6021a7a740affd374b0063cba77d109e5c4a4

  • SHA512

    78e06e1c44556f4aa1d922d4fb18b16a8f81a828d994eb75a3d1c1ab97635121875769356640465f648584a010826b8f3804505d1d90c92d2a2cf6e842bf8167

  • SSDEEP

    6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      4b8a0f6e1d8ab227e89714f8edb6021a7a740affd374b0063cba77d109e5c4a4

    • Size

      383KB

    • MD5

      273a60b3f7deae8502257f8b051b7150

    • SHA1

      8625951852e3f48d87097b80b369daffb5bf505e

    • SHA256

      4b8a0f6e1d8ab227e89714f8edb6021a7a740affd374b0063cba77d109e5c4a4

    • SHA512

      78e06e1c44556f4aa1d922d4fb18b16a8f81a828d994eb75a3d1c1ab97635121875769356640465f648584a010826b8f3804505d1d90c92d2a2cf6e842bf8167

    • SSDEEP

      6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks