General

  • Target

    e595ede6a851e62be763b5ac51b111a3c5498bbb1e70c3ed7a075b3e4c181c52

  • Size

    373KB

  • Sample

    241108-164rwa1dpm

  • MD5

    6fde68c19637da6b04afbefea9937f64

  • SHA1

    5fb92b831b7436224d51fed76d3404d4aedf0074

  • SHA256

    e595ede6a851e62be763b5ac51b111a3c5498bbb1e70c3ed7a075b3e4c181c52

  • SHA512

    abd7af017d8083ba4526e27920071d4ff5369d1b3f1bdc5e96192dbcb9841447030e46888f231f170a177bbd3a61d07431d99f755a51233b0adadf8ebec499a8

  • SSDEEP

    6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      e595ede6a851e62be763b5ac51b111a3c5498bbb1e70c3ed7a075b3e4c181c52

    • Size

      373KB

    • MD5

      6fde68c19637da6b04afbefea9937f64

    • SHA1

      5fb92b831b7436224d51fed76d3404d4aedf0074

    • SHA256

      e595ede6a851e62be763b5ac51b111a3c5498bbb1e70c3ed7a075b3e4c181c52

    • SHA512

      abd7af017d8083ba4526e27920071d4ff5369d1b3f1bdc5e96192dbcb9841447030e46888f231f170a177bbd3a61d07431d99f755a51233b0adadf8ebec499a8

    • SSDEEP

      6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks