General

  • Target

    ad3774b09d03ab13eedf54fa31b0a4b6ed8480a0eeeb75b9398b35a6b6384ea8

  • Size

    383KB

  • Sample

    241107-hk9f5awrgx

  • MD5

    de4f2ff55e3e0a02f040a824041b287e

  • SHA1

    4cc99709d424516bf67d315d086b423d6a3e7b43

  • SHA256

    ad3774b09d03ab13eedf54fa31b0a4b6ed8480a0eeeb75b9398b35a6b6384ea8

  • SHA512

    a94fcc0e5d9733d5232fbec1463ece651c60158c4655053046ca172ac2662b6d998d14bdb186b55f46b603983cdd0e4b6e7ece523086b6c2fb2b0a8a0ce6d18e

  • SSDEEP

    6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      ad3774b09d03ab13eedf54fa31b0a4b6ed8480a0eeeb75b9398b35a6b6384ea8

    • Size

      383KB

    • MD5

      de4f2ff55e3e0a02f040a824041b287e

    • SHA1

      4cc99709d424516bf67d315d086b423d6a3e7b43

    • SHA256

      ad3774b09d03ab13eedf54fa31b0a4b6ed8480a0eeeb75b9398b35a6b6384ea8

    • SHA512

      a94fcc0e5d9733d5232fbec1463ece651c60158c4655053046ca172ac2662b6d998d14bdb186b55f46b603983cdd0e4b6e7ece523086b6c2fb2b0a8a0ce6d18e

    • SSDEEP

      6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks