General

  • Target

    5a4386ae3cdb5032bccb70eecfe46d027367eee1ef72ef139686eacc665a5128

  • Size

    297KB

  • Sample

    241107-f41l8aynfk

  • MD5

    8ccb21a014a9342ab7bf980d397f0344

  • SHA1

    caea7f3b75d85389960cfdf6b3ecc12c5d1fea9f

  • SHA256

    5a4386ae3cdb5032bccb70eecfe46d027367eee1ef72ef139686eacc665a5128

  • SHA512

    1c8a21bbf9507fc840f1391ddf91eab30e95b077973b408f56d67237e8a866bd95d1a7941b64eddf8a53de70db91bbdab8d8c8759586d89851c09661fb57ca45

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      5a4386ae3cdb5032bccb70eecfe46d027367eee1ef72ef139686eacc665a5128

    • Size

      297KB

    • MD5

      8ccb21a014a9342ab7bf980d397f0344

    • SHA1

      caea7f3b75d85389960cfdf6b3ecc12c5d1fea9f

    • SHA256

      5a4386ae3cdb5032bccb70eecfe46d027367eee1ef72ef139686eacc665a5128

    • SHA512

      1c8a21bbf9507fc840f1391ddf91eab30e95b077973b408f56d67237e8a866bd95d1a7941b64eddf8a53de70db91bbdab8d8c8759586d89851c09661fb57ca45

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks