General

  • Target

    b4c09dec5520bb618c0b91510e1cce19e12a9be0cf1a8cf0c24a757d80f0f37b

  • Size

    373KB

  • Sample

    241106-zgs4eaxhqm

  • MD5

    3f97be9040839b807a28235553134fe5

  • SHA1

    54e0a3d929bc5101fe5d4b3764e0964d2e2e46c0

  • SHA256

    b4c09dec5520bb618c0b91510e1cce19e12a9be0cf1a8cf0c24a757d80f0f37b

  • SHA512

    531bc9441ef6bb8b613aca916d730acd8b57fa0351e30a8b8c899c6ffa163aa550190f69cd1ced3ea5fde357e86d00770ed212edfe75fabd9da203795b2ed133

  • SSDEEP

    6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      b4c09dec5520bb618c0b91510e1cce19e12a9be0cf1a8cf0c24a757d80f0f37b

    • Size

      373KB

    • MD5

      3f97be9040839b807a28235553134fe5

    • SHA1

      54e0a3d929bc5101fe5d4b3764e0964d2e2e46c0

    • SHA256

      b4c09dec5520bb618c0b91510e1cce19e12a9be0cf1a8cf0c24a757d80f0f37b

    • SHA512

      531bc9441ef6bb8b613aca916d730acd8b57fa0351e30a8b8c899c6ffa163aa550190f69cd1ced3ea5fde357e86d00770ed212edfe75fabd9da203795b2ed133

    • SSDEEP

      6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks