General

  • Target

    28567edb6053e1a216ff2f227a39c7cbe1d9a4cf18179c636e6f8683082bc748

  • Size

    423KB

  • Sample

    241107-rdnqhstdpp

  • MD5

    ee449bf81e71a5fa7a5f1902c8a6bef3

  • SHA1

    58f0d25c01b595ca4b7153ed4b740fd776ac9976

  • SHA256

    28567edb6053e1a216ff2f227a39c7cbe1d9a4cf18179c636e6f8683082bc748

  • SHA512

    a7f6505720a8b5eb722639d618a96dd97d225888d7a882dbcc1144d2ac08b5eb05fb35d9c4e7109bbeedda6496856bf926317436b79b7b61e1b89265f26728b3

  • SSDEEP

    6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      28567edb6053e1a216ff2f227a39c7cbe1d9a4cf18179c636e6f8683082bc748

    • Size

      423KB

    • MD5

      ee449bf81e71a5fa7a5f1902c8a6bef3

    • SHA1

      58f0d25c01b595ca4b7153ed4b740fd776ac9976

    • SHA256

      28567edb6053e1a216ff2f227a39c7cbe1d9a4cf18179c636e6f8683082bc748

    • SHA512

      a7f6505720a8b5eb722639d618a96dd97d225888d7a882dbcc1144d2ac08b5eb05fb35d9c4e7109bbeedda6496856bf926317436b79b7b61e1b89265f26728b3

    • SSDEEP

      6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks