General

  • Target

    43040cbdfb25a9fd1c6d86a97550f83ae9a27ee69b24825dcc657ae9110dec94

  • Size

    438KB

  • Sample

    241106-ljr28sxjdt

  • MD5

    10c79ef078416e15f9d5dfe21e8b80c8

  • SHA1

    53194bb2bfbe94b67388cbadb2eb1db9d1c6bc4f

  • SHA256

    43040cbdfb25a9fd1c6d86a97550f83ae9a27ee69b24825dcc657ae9110dec94

  • SHA512

    bcb348a2541367ddcc44369df193108bad15c545e0868cf6c52b8143b8abc5b5e11f69de136fa9dcceb99973ca2c43fd2cc6512f7a1d14fdc91d8e1728787d01

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      43040cbdfb25a9fd1c6d86a97550f83ae9a27ee69b24825dcc657ae9110dec94

    • Size

      438KB

    • MD5

      10c79ef078416e15f9d5dfe21e8b80c8

    • SHA1

      53194bb2bfbe94b67388cbadb2eb1db9d1c6bc4f

    • SHA256

      43040cbdfb25a9fd1c6d86a97550f83ae9a27ee69b24825dcc657ae9110dec94

    • SHA512

      bcb348a2541367ddcc44369df193108bad15c545e0868cf6c52b8143b8abc5b5e11f69de136fa9dcceb99973ca2c43fd2cc6512f7a1d14fdc91d8e1728787d01

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks