General

  • Target

    ba61989869652a03865b3f828adadc91f467b3dd1e343f5120a0f53ed3e238d0

  • Size

    297KB

  • Sample

    241107-devnkasqgs

  • MD5

    44a89ad5640fcd77c13f7e9959fce4d4

  • SHA1

    59ee942403450c5fcc8def6dad32eb96ab366fbb

  • SHA256

    ba61989869652a03865b3f828adadc91f467b3dd1e343f5120a0f53ed3e238d0

  • SHA512

    d08c84229222c87746093d84186b33bd269148d3c7d7d5eb59fbb03f14fd0306ff5f2ba6acd00d09d2b5787b37d8ae5c4a3bfdd539e336b92eaad6e17cfa9eda

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      ba61989869652a03865b3f828adadc91f467b3dd1e343f5120a0f53ed3e238d0

    • Size

      297KB

    • MD5

      44a89ad5640fcd77c13f7e9959fce4d4

    • SHA1

      59ee942403450c5fcc8def6dad32eb96ab366fbb

    • SHA256

      ba61989869652a03865b3f828adadc91f467b3dd1e343f5120a0f53ed3e238d0

    • SHA512

      d08c84229222c87746093d84186b33bd269148d3c7d7d5eb59fbb03f14fd0306ff5f2ba6acd00d09d2b5787b37d8ae5c4a3bfdd539e336b92eaad6e17cfa9eda

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks