General

  • Target

    8ca9dd38b0be67bbf65c5bab368e2305a919b998e6055d31e61f7b4f42dff7c4

  • Size

    438KB

  • Sample

    241106-lr1z4sxhmd

  • MD5

    b5547e48778ae493b6eb19979ce9ca34

  • SHA1

    7b02930fee9067e38ae760ecd065070c31bd4800

  • SHA256

    8ca9dd38b0be67bbf65c5bab368e2305a919b998e6055d31e61f7b4f42dff7c4

  • SHA512

    b8f2e5658d1840e1bcc8115245f943eaf3d5412ba783c546c42d1d102ad3586423d3312528b0710d8997d3b9b862cec059cce149e0842de6a2328a2174fa4671

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      8ca9dd38b0be67bbf65c5bab368e2305a919b998e6055d31e61f7b4f42dff7c4

    • Size

      438KB

    • MD5

      b5547e48778ae493b6eb19979ce9ca34

    • SHA1

      7b02930fee9067e38ae760ecd065070c31bd4800

    • SHA256

      8ca9dd38b0be67bbf65c5bab368e2305a919b998e6055d31e61f7b4f42dff7c4

    • SHA512

      b8f2e5658d1840e1bcc8115245f943eaf3d5412ba783c546c42d1d102ad3586423d3312528b0710d8997d3b9b862cec059cce149e0842de6a2328a2174fa4671

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks