General

  • Target

    472f05e34ecbe42c6ed97b8404698ee44b6d6ebc0566dc146cebd604e888a9b5

  • Size

    423KB

  • Sample

    241106-1cpqvszral

  • MD5

    0595195887b4e7d20a56b3b3c4a30161

  • SHA1

    f723db7c81860d5ed4bbaeb6690fe71575d23a98

  • SHA256

    472f05e34ecbe42c6ed97b8404698ee44b6d6ebc0566dc146cebd604e888a9b5

  • SHA512

    1d1916cc75016987c057d2e758180e72a2362a8dccc5b75731da4a30ddcd6b84ef95d7799029c47f59c5aec5320d3d237d93ffdc055bbb8b42ddfd4f031d2c0b

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      472f05e34ecbe42c6ed97b8404698ee44b6d6ebc0566dc146cebd604e888a9b5

    • Size

      423KB

    • MD5

      0595195887b4e7d20a56b3b3c4a30161

    • SHA1

      f723db7c81860d5ed4bbaeb6690fe71575d23a98

    • SHA256

      472f05e34ecbe42c6ed97b8404698ee44b6d6ebc0566dc146cebd604e888a9b5

    • SHA512

      1d1916cc75016987c057d2e758180e72a2362a8dccc5b75731da4a30ddcd6b84ef95d7799029c47f59c5aec5320d3d237d93ffdc055bbb8b42ddfd4f031d2c0b

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks