General

  • Target

    d99dc12b1b30bc47564efdb98c12b9c30b9d7ec63fb23f95b0ebaa625a1a2de4

  • Size

    438KB

  • Sample

    241106-2h486sylht

  • MD5

    b4b7ac86411264a50ce0adc25abe0ac5

  • SHA1

    40360459fb35bcd6bcade771612df6a62d6ff3b1

  • SHA256

    d99dc12b1b30bc47564efdb98c12b9c30b9d7ec63fb23f95b0ebaa625a1a2de4

  • SHA512

    8644bb19a9b48ec2ae3b251eb9ee3e0310122da8e68ad72b430c76786499eb78c3a09f22f0b8b08e16107f978dad85019786226bfd01f27728e6a7760a065593

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d99dc12b1b30bc47564efdb98c12b9c30b9d7ec63fb23f95b0ebaa625a1a2de4

    • Size

      438KB

    • MD5

      b4b7ac86411264a50ce0adc25abe0ac5

    • SHA1

      40360459fb35bcd6bcade771612df6a62d6ff3b1

    • SHA256

      d99dc12b1b30bc47564efdb98c12b9c30b9d7ec63fb23f95b0ebaa625a1a2de4

    • SHA512

      8644bb19a9b48ec2ae3b251eb9ee3e0310122da8e68ad72b430c76786499eb78c3a09f22f0b8b08e16107f978dad85019786226bfd01f27728e6a7760a065593

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks