General

  • Target

    9ab802a859a2178d1c65c057ff05ef42c96a0f8e3d0a68e537ddd063c65cabf1

  • Size

    438KB

  • Sample

    241108-3gd62asdjr

  • MD5

    4c5a537a186cc6df608759c2f59d4c84

  • SHA1

    5292f67535beba99a2ab2f6ce80f00e97d262568

  • SHA256

    9ab802a859a2178d1c65c057ff05ef42c96a0f8e3d0a68e537ddd063c65cabf1

  • SHA512

    6ff163894023925f51676ee9e0626317e1555381cec8eaf0a4c346a0f7bd8c08b3b72b4b22aa56c9cb0a33376fc77a4015eea7dba61153895ece2a797c1aa598

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      9ab802a859a2178d1c65c057ff05ef42c96a0f8e3d0a68e537ddd063c65cabf1

    • Size

      438KB

    • MD5

      4c5a537a186cc6df608759c2f59d4c84

    • SHA1

      5292f67535beba99a2ab2f6ce80f00e97d262568

    • SHA256

      9ab802a859a2178d1c65c057ff05ef42c96a0f8e3d0a68e537ddd063c65cabf1

    • SHA512

      6ff163894023925f51676ee9e0626317e1555381cec8eaf0a4c346a0f7bd8c08b3b72b4b22aa56c9cb0a33376fc77a4015eea7dba61153895ece2a797c1aa598

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks