General

  • Target

    5f4a60a8d03fd8ba6b0baa7a9d17ff173accc087b08fc6864184274e8fd66465

  • Size

    394KB

  • Sample

    241105-z9q5hsyepa

  • MD5

    dd1a8a887550d40d088e7fafd3ef2313

  • SHA1

    9f90e026c946da2807e0d3d83b0cda3914e370d8

  • SHA256

    5f4a60a8d03fd8ba6b0baa7a9d17ff173accc087b08fc6864184274e8fd66465

  • SHA512

    0a4884a60172d35665ca63fe0360d844cb3c7ef4301b9a2257b63de0897d2813f6fd379f17d45b13b67c88dcc1de15009c37ca3d4b25e30ef7592e320f16970f

  • SSDEEP

    6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      5f4a60a8d03fd8ba6b0baa7a9d17ff173accc087b08fc6864184274e8fd66465

    • Size

      394KB

    • MD5

      dd1a8a887550d40d088e7fafd3ef2313

    • SHA1

      9f90e026c946da2807e0d3d83b0cda3914e370d8

    • SHA256

      5f4a60a8d03fd8ba6b0baa7a9d17ff173accc087b08fc6864184274e8fd66465

    • SHA512

      0a4884a60172d35665ca63fe0360d844cb3c7ef4301b9a2257b63de0897d2813f6fd379f17d45b13b67c88dcc1de15009c37ca3d4b25e30ef7592e320f16970f

    • SSDEEP

      6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks