General

  • Target

    4374a8a156f30240cb78dec76f46cb413ffb047149326ac3966d37db030e9e5a

  • Size

    423KB

  • Sample

    241107-rd3jnstdqb

  • MD5

    46da1d36504f0a0930ce225f489579a2

  • SHA1

    01ae2788cddf05e5b271ccb70ccd9cd2dd181afa

  • SHA256

    4374a8a156f30240cb78dec76f46cb413ffb047149326ac3966d37db030e9e5a

  • SHA512

    cb5518d6086ffc6bf8024fb46d00484499e15b177f62c7ef57afd1378b5accb0445b3b48473fcf5ae9e07529c7b0f683323f2e4acab7c6c7f710ea933b8be38d

  • SSDEEP

    12288:u4rXu0OVUf2Au746adZtIzkNDtZuFM9bT6f+N:1lOG2tJ89tMUI+

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      4374a8a156f30240cb78dec76f46cb413ffb047149326ac3966d37db030e9e5a

    • Size

      423KB

    • MD5

      46da1d36504f0a0930ce225f489579a2

    • SHA1

      01ae2788cddf05e5b271ccb70ccd9cd2dd181afa

    • SHA256

      4374a8a156f30240cb78dec76f46cb413ffb047149326ac3966d37db030e9e5a

    • SHA512

      cb5518d6086ffc6bf8024fb46d00484499e15b177f62c7ef57afd1378b5accb0445b3b48473fcf5ae9e07529c7b0f683323f2e4acab7c6c7f710ea933b8be38d

    • SSDEEP

      12288:u4rXu0OVUf2Au746adZtIzkNDtZuFM9bT6f+N:1lOG2tJ89tMUI+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks