General

  • Target

    5ff757dbddd5f91456e9e769ed57555de3aad3088eeffa4099318c51bd25bd7e

  • Size

    438KB

  • Sample

    241105-vl2twstres

  • MD5

    a479ae009e3cc6e9b46b26e33064d7aa

  • SHA1

    d3b3b5e76e473894763942ea1bb223c4b185875b

  • SHA256

    5ff757dbddd5f91456e9e769ed57555de3aad3088eeffa4099318c51bd25bd7e

  • SHA512

    6f0389393e1ced68322da3d9378b0f61b2e2067591ed43a50bfac7fd22c03f52fcdf9d56d540de25c24b49888ea6efa31a5f805c59e5edefeee5d87b3837714b

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      5ff757dbddd5f91456e9e769ed57555de3aad3088eeffa4099318c51bd25bd7e

    • Size

      438KB

    • MD5

      a479ae009e3cc6e9b46b26e33064d7aa

    • SHA1

      d3b3b5e76e473894763942ea1bb223c4b185875b

    • SHA256

      5ff757dbddd5f91456e9e769ed57555de3aad3088eeffa4099318c51bd25bd7e

    • SHA512

      6f0389393e1ced68322da3d9378b0f61b2e2067591ed43a50bfac7fd22c03f52fcdf9d56d540de25c24b49888ea6efa31a5f805c59e5edefeee5d87b3837714b

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks