General

  • Target

    8264fc1999ad04cbcd3fe43fb8456c4f59f550473f9baa6bc6c1335efc80861c

  • Size

    297KB

  • Sample

    241107-nk839a1gqr

  • MD5

    e1edd388f3b3141174c2731bc9571250

  • SHA1

    43ce20cc4fa03b133fce40e1b69d30342ca7e3db

  • SHA256

    8264fc1999ad04cbcd3fe43fb8456c4f59f550473f9baa6bc6c1335efc80861c

  • SHA512

    efcfb22acf024283fda767eeb54e55c2efe4e6883934b88db1d64a7faa3534d67850cc1d6875bcf477878b5f69bc4c49cc37d095d13c730581082bd35b9bc6b0

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      8264fc1999ad04cbcd3fe43fb8456c4f59f550473f9baa6bc6c1335efc80861c

    • Size

      297KB

    • MD5

      e1edd388f3b3141174c2731bc9571250

    • SHA1

      43ce20cc4fa03b133fce40e1b69d30342ca7e3db

    • SHA256

      8264fc1999ad04cbcd3fe43fb8456c4f59f550473f9baa6bc6c1335efc80861c

    • SHA512

      efcfb22acf024283fda767eeb54e55c2efe4e6883934b88db1d64a7faa3534d67850cc1d6875bcf477878b5f69bc4c49cc37d095d13c730581082bd35b9bc6b0

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks