General

  • Target

    c231a47f778a4563f6e9a145edb035cc251a3eab0ee1fd5942e1aa1c59a2d177

  • Size

    438KB

  • Sample

    241106-mbnkhs1jgr

  • MD5

    bd13d9507ce9ad18f0db4adbd5474e1c

  • SHA1

    d620ec36dcc20e7c8a51a26253171cf6bedff762

  • SHA256

    c231a47f778a4563f6e9a145edb035cc251a3eab0ee1fd5942e1aa1c59a2d177

  • SHA512

    41d81c83ebfe1a0a5167a9e2ab06e0be341406235c79a4f89fffe21b5db8b4d7c93ea02bcf795f81ea5e6aa3cdea40eb72c16a0d9858b444cc2407582ca48230

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      c231a47f778a4563f6e9a145edb035cc251a3eab0ee1fd5942e1aa1c59a2d177

    • Size

      438KB

    • MD5

      bd13d9507ce9ad18f0db4adbd5474e1c

    • SHA1

      d620ec36dcc20e7c8a51a26253171cf6bedff762

    • SHA256

      c231a47f778a4563f6e9a145edb035cc251a3eab0ee1fd5942e1aa1c59a2d177

    • SHA512

      41d81c83ebfe1a0a5167a9e2ab06e0be341406235c79a4f89fffe21b5db8b4d7c93ea02bcf795f81ea5e6aa3cdea40eb72c16a0d9858b444cc2407582ca48230

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks