General

  • Target

    d538be7c557dd37a05b60977de757587603c2588bdf9199e414afd5fc5597a1a

  • Size

    438KB

  • Sample

    241105-v4t7rsvkfz

  • MD5

    e9508e1ea8f4ed71fdd07849e9407b3c

  • SHA1

    14f2d610b5dbf2357b79741c51fdea1885a7376e

  • SHA256

    d538be7c557dd37a05b60977de757587603c2588bdf9199e414afd5fc5597a1a

  • SHA512

    857ff24297958e5f471a14edca7f38a56e0dce97ee2bdd321b2e22cf08a427294c487f297104e44d0757162bbfce59e9fe7e91d8e67309f8069d935597165779

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d538be7c557dd37a05b60977de757587603c2588bdf9199e414afd5fc5597a1a

    • Size

      438KB

    • MD5

      e9508e1ea8f4ed71fdd07849e9407b3c

    • SHA1

      14f2d610b5dbf2357b79741c51fdea1885a7376e

    • SHA256

      d538be7c557dd37a05b60977de757587603c2588bdf9199e414afd5fc5597a1a

    • SHA512

      857ff24297958e5f471a14edca7f38a56e0dce97ee2bdd321b2e22cf08a427294c487f297104e44d0757162bbfce59e9fe7e91d8e67309f8069d935597165779

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks