General

  • Target

    186d375456735f99d845ba850cc8e33aa29b2183f7e90cc1eb84324fb858e641

  • Size

    423KB

  • Sample

    241106-1gx8ssyfjj

  • MD5

    21648dbaab94d7f55462644d5059004d

  • SHA1

    135484d773c130028a4405f66667792d0ff5c8cb

  • SHA256

    186d375456735f99d845ba850cc8e33aa29b2183f7e90cc1eb84324fb858e641

  • SHA512

    0c32f41b577b9a16f2bf2c67ff37999721e30cf9e920b2b6eac16f249e3189451c34642a743c0dd1725da91e2ba1dc1ed7280ce40f817c1b3252de8a135f4d06

  • SSDEEP

    6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      186d375456735f99d845ba850cc8e33aa29b2183f7e90cc1eb84324fb858e641

    • Size

      423KB

    • MD5

      21648dbaab94d7f55462644d5059004d

    • SHA1

      135484d773c130028a4405f66667792d0ff5c8cb

    • SHA256

      186d375456735f99d845ba850cc8e33aa29b2183f7e90cc1eb84324fb858e641

    • SHA512

      0c32f41b577b9a16f2bf2c67ff37999721e30cf9e920b2b6eac16f249e3189451c34642a743c0dd1725da91e2ba1dc1ed7280ce40f817c1b3252de8a135f4d06

    • SSDEEP

      6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks