General

  • Target

    28ac3ae373e568adbbf9d189f531f8361953722fc63b86f11ae830782f52ccd4

  • Size

    297KB

  • Sample

    241108-2kplhatpgp

  • MD5

    353ac7a43d0817801565d62df827c7ef

  • SHA1

    3476ab9887055cdc3d32aa78303a8ce8b9e52976

  • SHA256

    28ac3ae373e568adbbf9d189f531f8361953722fc63b86f11ae830782f52ccd4

  • SHA512

    ad3f6c9f1bb0d4404e46f1544fbf0999021d528acc3bbd32870c003e302cee85f1d70cebf2eec30b8c4c6e7e5933b7aa1c2cb9474b4c1cf23ffc469773f1b94a

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      28ac3ae373e568adbbf9d189f531f8361953722fc63b86f11ae830782f52ccd4

    • Size

      297KB

    • MD5

      353ac7a43d0817801565d62df827c7ef

    • SHA1

      3476ab9887055cdc3d32aa78303a8ce8b9e52976

    • SHA256

      28ac3ae373e568adbbf9d189f531f8361953722fc63b86f11ae830782f52ccd4

    • SHA512

      ad3f6c9f1bb0d4404e46f1544fbf0999021d528acc3bbd32870c003e302cee85f1d70cebf2eec30b8c4c6e7e5933b7aa1c2cb9474b4c1cf23ffc469773f1b94a

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks