General

  • Target

    58b3582ee0489ae7b788632b099f5dc8b15e0104f8f1cfdc3f1dc9addd2bb6bb

  • Size

    423KB

  • Sample

    241107-jj5xzsxnct

  • MD5

    48a2c1699b8e17611d185601124ec771

  • SHA1

    d947385ea2b726c1b82d3eac25f5933168a73e04

  • SHA256

    58b3582ee0489ae7b788632b099f5dc8b15e0104f8f1cfdc3f1dc9addd2bb6bb

  • SHA512

    98f7c069ebf8cc209c0df70b52a0034f367f5dd6c0ee5393e1ee6828b08c0d5b7b69013219ec470288f6166e24d0e05969056665a3927cad6f28054cb4715340

  • SSDEEP

    6144:cMui5ObVmy+0LExccD4HOCL+qzPI1vCyuKkYi82Jzj6efYPV0p:GrLExjiOCyqzPI1vCyuKkBJzjL

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      58b3582ee0489ae7b788632b099f5dc8b15e0104f8f1cfdc3f1dc9addd2bb6bb

    • Size

      423KB

    • MD5

      48a2c1699b8e17611d185601124ec771

    • SHA1

      d947385ea2b726c1b82d3eac25f5933168a73e04

    • SHA256

      58b3582ee0489ae7b788632b099f5dc8b15e0104f8f1cfdc3f1dc9addd2bb6bb

    • SHA512

      98f7c069ebf8cc209c0df70b52a0034f367f5dd6c0ee5393e1ee6828b08c0d5b7b69013219ec470288f6166e24d0e05969056665a3927cad6f28054cb4715340

    • SSDEEP

      6144:cMui5ObVmy+0LExccD4HOCL+qzPI1vCyuKkYi82Jzj6efYPV0p:GrLExjiOCyqzPI1vCyuKkBJzjL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks