General

  • Target

    e8756f91c5fad9dbf08534ae3016945a958d9b1b69430228edb7e5ad86a69e74

  • Size

    298KB

  • Sample

    241107-3s3zjatjdm

  • MD5

    18092ecf4d828226a3ea4cbff429b4e6

  • SHA1

    ee2daf81ac188b4bd0d965b7c8e30eb1c4f9fd23

  • SHA256

    e8756f91c5fad9dbf08534ae3016945a958d9b1b69430228edb7e5ad86a69e74

  • SHA512

    b1b1c529f74134b92625ecf18c5d5c485324f06de29641ba4c0a34a8142b1765ed379421ed796e7310cb857e76bfd0bab2a37ca984c6b47b5cdc97b97b1a60ba

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      e8756f91c5fad9dbf08534ae3016945a958d9b1b69430228edb7e5ad86a69e74

    • Size

      298KB

    • MD5

      18092ecf4d828226a3ea4cbff429b4e6

    • SHA1

      ee2daf81ac188b4bd0d965b7c8e30eb1c4f9fd23

    • SHA256

      e8756f91c5fad9dbf08534ae3016945a958d9b1b69430228edb7e5ad86a69e74

    • SHA512

      b1b1c529f74134b92625ecf18c5d5c485324f06de29641ba4c0a34a8142b1765ed379421ed796e7310cb857e76bfd0bab2a37ca984c6b47b5cdc97b97b1a60ba

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks