General

  • Target

    819b323f5d2d508bafebf0f21fe7c1a71060a962fbe0b2a436d526f3e783a621

  • Size

    438KB

  • Sample

    241106-m888gszbnr

  • MD5

    9259cc4ddc21eff8334691f87f9fa489

  • SHA1

    1d07daa382a0ba6f5fff063635c204504507604c

  • SHA256

    819b323f5d2d508bafebf0f21fe7c1a71060a962fbe0b2a436d526f3e783a621

  • SHA512

    ec680eb596c9036947f2aed4954908de06c1bcc878fe7268b18c1a8c1464e47b53d1d7976b547abb43695b5094710ec14dc1aa09c73a76a2ec526a15000f5580

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      819b323f5d2d508bafebf0f21fe7c1a71060a962fbe0b2a436d526f3e783a621

    • Size

      438KB

    • MD5

      9259cc4ddc21eff8334691f87f9fa489

    • SHA1

      1d07daa382a0ba6f5fff063635c204504507604c

    • SHA256

      819b323f5d2d508bafebf0f21fe7c1a71060a962fbe0b2a436d526f3e783a621

    • SHA512

      ec680eb596c9036947f2aed4954908de06c1bcc878fe7268b18c1a8c1464e47b53d1d7976b547abb43695b5094710ec14dc1aa09c73a76a2ec526a15000f5580

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks