General

  • Target

    ee64b48d0ed372576412ada3b5a4669a9765bc1739c9d24f2ab1c8c560762d16

  • Size

    371KB

  • Sample

    241107-ced55sshka

  • MD5

    47fe7f17084588cdf74956614c65af11

  • SHA1

    f405e4dc6c786ef871ab0d85ed8a9de2b60aa918

  • SHA256

    ee64b48d0ed372576412ada3b5a4669a9765bc1739c9d24f2ab1c8c560762d16

  • SHA512

    24eac4a7fa9f6c5fad1a95523a401e8afd7b1c7faaa0aeae926534b954311eac7aebf293f0c5e79eb8a79a6fd7818a73ecee54b8b28770b10c371214b604ff7c

  • SSDEEP

    6144:OCXITG+urF+W2/cH8J6yr/bAxgPLrk1sx5b7ITsqXigaXwVfZ:OCXITDDWmx6BOj8O17R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      ee64b48d0ed372576412ada3b5a4669a9765bc1739c9d24f2ab1c8c560762d16

    • Size

      371KB

    • MD5

      47fe7f17084588cdf74956614c65af11

    • SHA1

      f405e4dc6c786ef871ab0d85ed8a9de2b60aa918

    • SHA256

      ee64b48d0ed372576412ada3b5a4669a9765bc1739c9d24f2ab1c8c560762d16

    • SHA512

      24eac4a7fa9f6c5fad1a95523a401e8afd7b1c7faaa0aeae926534b954311eac7aebf293f0c5e79eb8a79a6fd7818a73ecee54b8b28770b10c371214b604ff7c

    • SSDEEP

      6144:OCXITG+urF+W2/cH8J6yr/bAxgPLrk1sx5b7ITsqXigaXwVfZ:OCXITDDWmx6BOj8O17R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks