General

  • Target

    5a9c91df829e428e902a054911594b5bcd58cbd6a460f3e607a23546d52f1071

  • Size

    297KB

  • Sample

    241107-s3nx9atrf1

  • MD5

    b9fae280e1d2b57c9e2aa98e377931dd

  • SHA1

    fe21447d43083627151ea411a1dd0b9792235c26

  • SHA256

    5a9c91df829e428e902a054911594b5bcd58cbd6a460f3e607a23546d52f1071

  • SHA512

    bb62c30bf07f5ae17a64ad8103583efe5de74657fc2ebaacc65fb08355043f4e7283952c0c4214bd00160e884cc4bd151f92714fc29ed0acc38f27bd841c6d3a

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      5a9c91df829e428e902a054911594b5bcd58cbd6a460f3e607a23546d52f1071

    • Size

      297KB

    • MD5

      b9fae280e1d2b57c9e2aa98e377931dd

    • SHA1

      fe21447d43083627151ea411a1dd0b9792235c26

    • SHA256

      5a9c91df829e428e902a054911594b5bcd58cbd6a460f3e607a23546d52f1071

    • SHA512

      bb62c30bf07f5ae17a64ad8103583efe5de74657fc2ebaacc65fb08355043f4e7283952c0c4214bd00160e884cc4bd151f92714fc29ed0acc38f27bd841c6d3a

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks