General

  • Target

    042ed922d2d29315277644e03462c91d210c9181713336d6f6c9c42906553fca

  • Size

    371KB

  • Sample

    241107-n62lassale

  • MD5

    cede20efe6a5347c44160af8c31670a0

  • SHA1

    48490d1de77fce53be4e6c41ee2e82ae6c3d750c

  • SHA256

    042ed922d2d29315277644e03462c91d210c9181713336d6f6c9c42906553fca

  • SHA512

    4eb7ff958be37090de958775047b685bed77e63a028cba51b4a6b15ef3b8752b695b915122883aa509d61737e52e7cb658a9397c1af5bd361c1a7d932b38e736

  • SSDEEP

    6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      042ed922d2d29315277644e03462c91d210c9181713336d6f6c9c42906553fca

    • Size

      371KB

    • MD5

      cede20efe6a5347c44160af8c31670a0

    • SHA1

      48490d1de77fce53be4e6c41ee2e82ae6c3d750c

    • SHA256

      042ed922d2d29315277644e03462c91d210c9181713336d6f6c9c42906553fca

    • SHA512

      4eb7ff958be37090de958775047b685bed77e63a028cba51b4a6b15ef3b8752b695b915122883aa509d61737e52e7cb658a9397c1af5bd361c1a7d932b38e736

    • SSDEEP

      6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks