General

  • Target

    53a5eb8d2efd797fd3f301e9af41a08853ea3807491dd7a0e5eee23ad7381574

  • Size

    373KB

  • Sample

    241107-s9kjeavflk

  • MD5

    8221752476f5cb3de7cfaf70494c2000

  • SHA1

    89e3408e6d68fd075b7b5632d2662590c0c17a81

  • SHA256

    53a5eb8d2efd797fd3f301e9af41a08853ea3807491dd7a0e5eee23ad7381574

  • SHA512

    85e621aa313cfd00a77e521e3962ea7bf566eacfc2a7d5768953f8684af4d48ffed9e59058dee6ee17fcb1334feb6a2fefc6923315ab07b0a6844c1db3ee84ba

  • SSDEEP

    6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      53a5eb8d2efd797fd3f301e9af41a08853ea3807491dd7a0e5eee23ad7381574

    • Size

      373KB

    • MD5

      8221752476f5cb3de7cfaf70494c2000

    • SHA1

      89e3408e6d68fd075b7b5632d2662590c0c17a81

    • SHA256

      53a5eb8d2efd797fd3f301e9af41a08853ea3807491dd7a0e5eee23ad7381574

    • SHA512

      85e621aa313cfd00a77e521e3962ea7bf566eacfc2a7d5768953f8684af4d48ffed9e59058dee6ee17fcb1334feb6a2fefc6923315ab07b0a6844c1db3ee84ba

    • SSDEEP

      6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks