General

  • Target

    d36f4ff8a9e556ac923d971b3d1924a63f2a5b49eacd86de10c6a75f37d78cd6

  • Size

    428KB

  • Sample

    241108-1w5anatken

  • MD5

    b530131e96fa9d6c179cce7401d2b674

  • SHA1

    0bfbe6b83ab01f2d98b6b195f0ce2df024f7a210

  • SHA256

    d36f4ff8a9e556ac923d971b3d1924a63f2a5b49eacd86de10c6a75f37d78cd6

  • SHA512

    accbda28b047b3b2d2121dd4f1f9f9978251c052202bff74d17e164be8bf389f84b9faeef0aba2e553441bd365e0905aecbc5a70b36f94c8961f289be5a33600

  • SSDEEP

    12288:D8uKp5Z8p63S1yK1iL/++jLR9xdhKgen:QuRk3S1ynLJPX

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d36f4ff8a9e556ac923d971b3d1924a63f2a5b49eacd86de10c6a75f37d78cd6

    • Size

      428KB

    • MD5

      b530131e96fa9d6c179cce7401d2b674

    • SHA1

      0bfbe6b83ab01f2d98b6b195f0ce2df024f7a210

    • SHA256

      d36f4ff8a9e556ac923d971b3d1924a63f2a5b49eacd86de10c6a75f37d78cd6

    • SHA512

      accbda28b047b3b2d2121dd4f1f9f9978251c052202bff74d17e164be8bf389f84b9faeef0aba2e553441bd365e0905aecbc5a70b36f94c8961f289be5a33600

    • SSDEEP

      12288:D8uKp5Z8p63S1yK1iL/++jLR9xdhKgen:QuRk3S1ynLJPX

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks