General

  • Target

    19b72e20ffc32d09a688b26bac9c044d9f723e4ad3323d359ea06974b1bc924e

  • Size

    423KB

  • Sample

    241107-ktygbszbpr

  • MD5

    969af8d05992eb3df709336cfd51a5f2

  • SHA1

    d7abb1147b62cc17bb483e20aa04b15ce8f4f3a5

  • SHA256

    19b72e20ffc32d09a688b26bac9c044d9f723e4ad3323d359ea06974b1bc924e

  • SHA512

    55f68474ae95edc4899f0ed95a2447bc46e3677a651d2760e646c2cd4346c52aa8600d52d797f7821cce99210d73460f8778e96a572f787890353d6d6751963e

  • SSDEEP

    6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      19b72e20ffc32d09a688b26bac9c044d9f723e4ad3323d359ea06974b1bc924e

    • Size

      423KB

    • MD5

      969af8d05992eb3df709336cfd51a5f2

    • SHA1

      d7abb1147b62cc17bb483e20aa04b15ce8f4f3a5

    • SHA256

      19b72e20ffc32d09a688b26bac9c044d9f723e4ad3323d359ea06974b1bc924e

    • SHA512

      55f68474ae95edc4899f0ed95a2447bc46e3677a651d2760e646c2cd4346c52aa8600d52d797f7821cce99210d73460f8778e96a572f787890353d6d6751963e

    • SSDEEP

      6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks