General

  • Target

    4f8cead4275114727b41b90582c72d556af8764824142a9b4ed701f5352a4cbd

  • Size

    438KB

  • Sample

    241107-gpj7csxale

  • MD5

    4a5190192653af1ce014c6849a0fa6f3

  • SHA1

    f2584601e41f8188a0b9b482b50baf4cf5d22ae7

  • SHA256

    4f8cead4275114727b41b90582c72d556af8764824142a9b4ed701f5352a4cbd

  • SHA512

    df2a5fd5cd2f2a937caebe3e829beaeea30ef3c92499efde92a0d5363b42b65745a02a1fdbf78e184bfbff283427c36a2cbfd3d08304d0fb5677db53d33f8172

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      4f8cead4275114727b41b90582c72d556af8764824142a9b4ed701f5352a4cbd

    • Size

      438KB

    • MD5

      4a5190192653af1ce014c6849a0fa6f3

    • SHA1

      f2584601e41f8188a0b9b482b50baf4cf5d22ae7

    • SHA256

      4f8cead4275114727b41b90582c72d556af8764824142a9b4ed701f5352a4cbd

    • SHA512

      df2a5fd5cd2f2a937caebe3e829beaeea30ef3c92499efde92a0d5363b42b65745a02a1fdbf78e184bfbff283427c36a2cbfd3d08304d0fb5677db53d33f8172

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks