General

  • Target

    3cdcbfde994c2d23c795d73dbcbca8bf0728cb8b2e09fddc6daeccc9b22aff64

  • Size

    298KB

  • Sample

    241107-prvpwasdjh

  • MD5

    ed0540175c6789ddb1330efe6b4f9c79

  • SHA1

    2a056d7763ceba4bf001711a9259820eb04186ef

  • SHA256

    3cdcbfde994c2d23c795d73dbcbca8bf0728cb8b2e09fddc6daeccc9b22aff64

  • SHA512

    8ac04c921136c5d92b98ea5768e41b735522f0cfcb3287c305a83adae6e416aa6a56dfc914924be95c15163e565cd127e0fb795aa3adbd92446b86bae272072f

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      3cdcbfde994c2d23c795d73dbcbca8bf0728cb8b2e09fddc6daeccc9b22aff64

    • Size

      298KB

    • MD5

      ed0540175c6789ddb1330efe6b4f9c79

    • SHA1

      2a056d7763ceba4bf001711a9259820eb04186ef

    • SHA256

      3cdcbfde994c2d23c795d73dbcbca8bf0728cb8b2e09fddc6daeccc9b22aff64

    • SHA512

      8ac04c921136c5d92b98ea5768e41b735522f0cfcb3287c305a83adae6e416aa6a56dfc914924be95c15163e565cd127e0fb795aa3adbd92446b86bae272072f

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks