General

  • Target

    2478347561db4a7cc9a914b0d427c5314a52e4c11bdf7662f54625521a383510

  • Size

    297KB

  • Sample

    241106-wnc4zsvdmb

  • MD5

    a4763eebf52d7b523e86eaf86b652cf9

  • SHA1

    5196643970d666e87599ffea08d4322e28956230

  • SHA256

    2478347561db4a7cc9a914b0d427c5314a52e4c11bdf7662f54625521a383510

  • SHA512

    040ad24b170f6799635a3d828b714b80d0203c87f6a05d85d930e3faba0cdbd4a77d26670013a70029212b38a32cbecd4914b7e4e9ec9e94485da218a5cda672

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2478347561db4a7cc9a914b0d427c5314a52e4c11bdf7662f54625521a383510

    • Size

      297KB

    • MD5

      a4763eebf52d7b523e86eaf86b652cf9

    • SHA1

      5196643970d666e87599ffea08d4322e28956230

    • SHA256

      2478347561db4a7cc9a914b0d427c5314a52e4c11bdf7662f54625521a383510

    • SHA512

      040ad24b170f6799635a3d828b714b80d0203c87f6a05d85d930e3faba0cdbd4a77d26670013a70029212b38a32cbecd4914b7e4e9ec9e94485da218a5cda672

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks