General

  • Target

    1f4be4730dcd0c465e26e8630443c5ca28f8fb7e6908c68870393d4efe25578b

  • Size

    298KB

  • Sample

    241107-qgefkssgne

  • MD5

    300c657723ed6b6018b7b74105ef8817

  • SHA1

    e143f0d88b622f6a3384d80d8f9489ccb208139b

  • SHA256

    1f4be4730dcd0c465e26e8630443c5ca28f8fb7e6908c68870393d4efe25578b

  • SHA512

    78cc20cbb9600c1771302c3e3f5949d7b886c1ab1817eb77993d6deda383f15a215744db0d7f4cc12439159ac45dfae97424128f2d96e44554b4acc9f2043919

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      1f4be4730dcd0c465e26e8630443c5ca28f8fb7e6908c68870393d4efe25578b

    • Size

      298KB

    • MD5

      300c657723ed6b6018b7b74105ef8817

    • SHA1

      e143f0d88b622f6a3384d80d8f9489ccb208139b

    • SHA256

      1f4be4730dcd0c465e26e8630443c5ca28f8fb7e6908c68870393d4efe25578b

    • SHA512

      78cc20cbb9600c1771302c3e3f5949d7b886c1ab1817eb77993d6deda383f15a215744db0d7f4cc12439159ac45dfae97424128f2d96e44554b4acc9f2043919

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks