General

  • Target

    5f3fb581b3cf8dee77f28ac24a3c2f27780f94dd2776169963e56f2d9465bc34

  • Size

    394KB

  • Sample

    241106-zejrysxdpd

  • MD5

    1374a6734c4cf7f4e0e2c1c8098e40a0

  • SHA1

    c1d95f3f918d950f76851286e0efbb01ee833476

  • SHA256

    5f3fb581b3cf8dee77f28ac24a3c2f27780f94dd2776169963e56f2d9465bc34

  • SHA512

    74bb4f527ecd34fdb15bda16b4a5553c8c1a14e97991d8cca36cec72e976a531885d805973670c21288a6dfd484d0e0893392f696f94ee698a6c34358782c806

  • SSDEEP

    6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      5f3fb581b3cf8dee77f28ac24a3c2f27780f94dd2776169963e56f2d9465bc34

    • Size

      394KB

    • MD5

      1374a6734c4cf7f4e0e2c1c8098e40a0

    • SHA1

      c1d95f3f918d950f76851286e0efbb01ee833476

    • SHA256

      5f3fb581b3cf8dee77f28ac24a3c2f27780f94dd2776169963e56f2d9465bc34

    • SHA512

      74bb4f527ecd34fdb15bda16b4a5553c8c1a14e97991d8cca36cec72e976a531885d805973670c21288a6dfd484d0e0893392f696f94ee698a6c34358782c806

    • SSDEEP

      6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks