General

  • Target

    9030b2f62e72865473543cd894d26f4a7102123bf45a4995f824e8e4c905e3be

  • Size

    423KB

  • Sample

    241107-mky3ls1brm

  • MD5

    528484fea3111515cabaa62f62f1d1db

  • SHA1

    dec80508eecd1b6792afbc9bdc5f1da7162ed591

  • SHA256

    9030b2f62e72865473543cd894d26f4a7102123bf45a4995f824e8e4c905e3be

  • SHA512

    1d39a6ff9360d1a46fbefbe1c0b31fb6ce698970bdcedc54f5ee61d23be30e3527442a93c55460b64a1f488936175b6f15db349778ae549f722f0b0e70b28146

  • SSDEEP

    6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      9030b2f62e72865473543cd894d26f4a7102123bf45a4995f824e8e4c905e3be

    • Size

      423KB

    • MD5

      528484fea3111515cabaa62f62f1d1db

    • SHA1

      dec80508eecd1b6792afbc9bdc5f1da7162ed591

    • SHA256

      9030b2f62e72865473543cd894d26f4a7102123bf45a4995f824e8e4c905e3be

    • SHA512

      1d39a6ff9360d1a46fbefbe1c0b31fb6ce698970bdcedc54f5ee61d23be30e3527442a93c55460b64a1f488936175b6f15db349778ae549f722f0b0e70b28146

    • SSDEEP

      6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks