General

  • Target

    48909f87c4b8bc5f4f336957e29ee066cc40119f58d760fe3bd8bd6d61631bd3

  • Size

    423KB

  • Sample

    241107-nz2bys1hlg

  • MD5

    8412e41b0dabe133c8ea7a570ec2516d

  • SHA1

    9e115793944744516984963493a6260d66ccbc52

  • SHA256

    48909f87c4b8bc5f4f336957e29ee066cc40119f58d760fe3bd8bd6d61631bd3

  • SHA512

    6d50be77c0719164982f83b9e7d4a454114ca5ec90026c500ab61ec2ca0c6d82e6d8ed025445dbe4d1c4844c753c93379fc1d1584507619c72144586e27ac638

  • SSDEEP

    6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      48909f87c4b8bc5f4f336957e29ee066cc40119f58d760fe3bd8bd6d61631bd3

    • Size

      423KB

    • MD5

      8412e41b0dabe133c8ea7a570ec2516d

    • SHA1

      9e115793944744516984963493a6260d66ccbc52

    • SHA256

      48909f87c4b8bc5f4f336957e29ee066cc40119f58d760fe3bd8bd6d61631bd3

    • SHA512

      6d50be77c0719164982f83b9e7d4a454114ca5ec90026c500ab61ec2ca0c6d82e6d8ed025445dbe4d1c4844c753c93379fc1d1584507619c72144586e27ac638

    • SSDEEP

      6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks