General

  • Target

    69675017dec8e1e649a5d5c8d2ee34db47ae22c0f63b651db3128a02fc730d3a

  • Size

    298KB

  • Sample

    241106-1pdt5axpd1

  • MD5

    5e4f354972113d6cc29ca9fd6934f417

  • SHA1

    262358c82760050a3443071ee94d813a12bf8e28

  • SHA256

    69675017dec8e1e649a5d5c8d2ee34db47ae22c0f63b651db3128a02fc730d3a

  • SHA512

    c784c14481aa73cfa208c6f61d8907b4a3c38c6a7d053fb497c68304116b1bfb4f4041085357e61246f3d89baf705ea8c369ff5db50938042edc91003bc706f8

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      69675017dec8e1e649a5d5c8d2ee34db47ae22c0f63b651db3128a02fc730d3a

    • Size

      298KB

    • MD5

      5e4f354972113d6cc29ca9fd6934f417

    • SHA1

      262358c82760050a3443071ee94d813a12bf8e28

    • SHA256

      69675017dec8e1e649a5d5c8d2ee34db47ae22c0f63b651db3128a02fc730d3a

    • SHA512

      c784c14481aa73cfa208c6f61d8907b4a3c38c6a7d053fb497c68304116b1bfb4f4041085357e61246f3d89baf705ea8c369ff5db50938042edc91003bc706f8

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks