General

  • Target

    f4ea51b0b719bd2fa19ce18bdc912b51bf608964d68f7a8dcae304ba8fdb22ec

  • Size

    371KB

  • Sample

    241106-1r8saaydnh

  • MD5

    40cd52fa977e03d070667b89859d6da9

  • SHA1

    3b72d0b7ffe9303cb857ffa3d7541a260c7de1bb

  • SHA256

    f4ea51b0b719bd2fa19ce18bdc912b51bf608964d68f7a8dcae304ba8fdb22ec

  • SHA512

    4c1be878a9ca14bddafd819657596dd0b78daad27b84825919aad87b2e50d82c6427058d0b477c5427f0cfd772b0fa684c1e05795e2e0c87e6bfe6d54c0cb733

  • SSDEEP

    6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f4ea51b0b719bd2fa19ce18bdc912b51bf608964d68f7a8dcae304ba8fdb22ec

    • Size

      371KB

    • MD5

      40cd52fa977e03d070667b89859d6da9

    • SHA1

      3b72d0b7ffe9303cb857ffa3d7541a260c7de1bb

    • SHA256

      f4ea51b0b719bd2fa19ce18bdc912b51bf608964d68f7a8dcae304ba8fdb22ec

    • SHA512

      4c1be878a9ca14bddafd819657596dd0b78daad27b84825919aad87b2e50d82c6427058d0b477c5427f0cfd772b0fa684c1e05795e2e0c87e6bfe6d54c0cb733

    • SSDEEP

      6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks