General

  • Target

    bc527493d98623c0d5d98fbf473696ddec480fd38cfcf5a5906d1a295014a184

  • Size

    297KB

  • Sample

    241108-1ny4nszhlb

  • MD5

    fa278ce150f20963417fcd24238a4c35

  • SHA1

    94f9b515234774ecd0480462b2301a833f107f1d

  • SHA256

    bc527493d98623c0d5d98fbf473696ddec480fd38cfcf5a5906d1a295014a184

  • SHA512

    61b48231c521f2a5b26c68731cdb50f751d8a9527451b4c185408c70927e85d2b913fbdb9b6f050662a585b8b5d7a1b50e347795a8ad2972dc1d9356432d422a

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      bc527493d98623c0d5d98fbf473696ddec480fd38cfcf5a5906d1a295014a184

    • Size

      297KB

    • MD5

      fa278ce150f20963417fcd24238a4c35

    • SHA1

      94f9b515234774ecd0480462b2301a833f107f1d

    • SHA256

      bc527493d98623c0d5d98fbf473696ddec480fd38cfcf5a5906d1a295014a184

    • SHA512

      61b48231c521f2a5b26c68731cdb50f751d8a9527451b4c185408c70927e85d2b913fbdb9b6f050662a585b8b5d7a1b50e347795a8ad2972dc1d9356432d422a

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks