General

  • Target

    e2f436a06da28459fc84d9a07b20ca282ee2db1cc853cfc72d517c10ebe21090

  • Size

    438KB

  • Sample

    241107-kh6nkaygjc

  • MD5

    5e3df60b738ae589a79338c6d8a9054e

  • SHA1

    5bce8ae561714df501d7f6ea14cded796f62d8a8

  • SHA256

    e2f436a06da28459fc84d9a07b20ca282ee2db1cc853cfc72d517c10ebe21090

  • SHA512

    a485418b6d5c0ca1321dd85996b9b0ba7422c3632a355898ae6b48e23f75d57ee186dfcc12500c34f757f58861145a7775610918e520e422b9d78ab0f1f7a919

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      e2f436a06da28459fc84d9a07b20ca282ee2db1cc853cfc72d517c10ebe21090

    • Size

      438KB

    • MD5

      5e3df60b738ae589a79338c6d8a9054e

    • SHA1

      5bce8ae561714df501d7f6ea14cded796f62d8a8

    • SHA256

      e2f436a06da28459fc84d9a07b20ca282ee2db1cc853cfc72d517c10ebe21090

    • SHA512

      a485418b6d5c0ca1321dd85996b9b0ba7422c3632a355898ae6b48e23f75d57ee186dfcc12500c34f757f58861145a7775610918e520e422b9d78ab0f1f7a919

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks