General

  • Target

    2b82dd10cae7020fa6d71612eb7dce68bd811bc8d92ead96263320b43acd9631

  • Size

    298KB

  • Sample

    241106-xrnkkayjfr

  • MD5

    431136b0cfe1c2e5de2d0b4cc42fffbf

  • SHA1

    ce7c01ec19220f54a653c331a5a31d5d8bcd04a1

  • SHA256

    2b82dd10cae7020fa6d71612eb7dce68bd811bc8d92ead96263320b43acd9631

  • SHA512

    31325cb05bb4390a85eef73370cdcaf6cd0c11d387901ddaae6d663f20c600dd0d7b1372bb9aa287fc3e0cd472954c59196777ac6a8a556c79b9192cc78c3ccf

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2b82dd10cae7020fa6d71612eb7dce68bd811bc8d92ead96263320b43acd9631

    • Size

      298KB

    • MD5

      431136b0cfe1c2e5de2d0b4cc42fffbf

    • SHA1

      ce7c01ec19220f54a653c331a5a31d5d8bcd04a1

    • SHA256

      2b82dd10cae7020fa6d71612eb7dce68bd811bc8d92ead96263320b43acd9631

    • SHA512

      31325cb05bb4390a85eef73370cdcaf6cd0c11d387901ddaae6d663f20c600dd0d7b1372bb9aa287fc3e0cd472954c59196777ac6a8a556c79b9192cc78c3ccf

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks