General

  • Target

    8d431e511d04da427d7670b9ecc6ce348c47d5e1b57a0cacff21fb62cb467ae9

  • Size

    438KB

  • Sample

    241107-lfb7lsyqav

  • MD5

    1e5d87fbc774f36ef51d64325b5b2827

  • SHA1

    05eeb38808103390c7fb9cd3c4dff5faa2498bcf

  • SHA256

    8d431e511d04da427d7670b9ecc6ce348c47d5e1b57a0cacff21fb62cb467ae9

  • SHA512

    b3ca965ab6032148cf04bed591a2cee1932cf22d0cc93acc828b47ac7d21a9363e842071f3bcf997e6102f10fd529ce51764af9f1ed62156b22fc27383519df8

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      8d431e511d04da427d7670b9ecc6ce348c47d5e1b57a0cacff21fb62cb467ae9

    • Size

      438KB

    • MD5

      1e5d87fbc774f36ef51d64325b5b2827

    • SHA1

      05eeb38808103390c7fb9cd3c4dff5faa2498bcf

    • SHA256

      8d431e511d04da427d7670b9ecc6ce348c47d5e1b57a0cacff21fb62cb467ae9

    • SHA512

      b3ca965ab6032148cf04bed591a2cee1932cf22d0cc93acc828b47ac7d21a9363e842071f3bcf997e6102f10fd529ce51764af9f1ed62156b22fc27383519df8

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks