General

  • Target

    586219f160c261709d3f6729be954df5ddc98c46b3363208d2098f7842d1eb48

  • Size

    346KB

  • Sample

    241107-srtdlaxkhl

  • MD5

    55e4c279609267e93adf7d53b451cf84

  • SHA1

    41f4076fbe73cb4b9985ed9c096ae088cac5bdfc

  • SHA256

    586219f160c261709d3f6729be954df5ddc98c46b3363208d2098f7842d1eb48

  • SHA512

    e38cb2a5273375b11a5d8b8b430fc6356a6d7b9c4350cbe25491ede3e273e55ed9d721a5abcbcdb25ac053575c5d06185e5e62711b5bab693745a0aa67b3ad3c

  • SSDEEP

    6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      586219f160c261709d3f6729be954df5ddc98c46b3363208d2098f7842d1eb48

    • Size

      346KB

    • MD5

      55e4c279609267e93adf7d53b451cf84

    • SHA1

      41f4076fbe73cb4b9985ed9c096ae088cac5bdfc

    • SHA256

      586219f160c261709d3f6729be954df5ddc98c46b3363208d2098f7842d1eb48

    • SHA512

      e38cb2a5273375b11a5d8b8b430fc6356a6d7b9c4350cbe25491ede3e273e55ed9d721a5abcbcdb25ac053575c5d06185e5e62711b5bab693745a0aa67b3ad3c

    • SSDEEP

      6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks