General

  • Target

    d57e807b4b2c675744b898395ddf58b30c11fe611a614d493dbf9e5eaef146a1

  • Size

    370KB

  • Sample

    241108-baa29a1gnl

  • MD5

    7899e8e17e3f95a31809d38f9f7cea19

  • SHA1

    e6e111fac3b9d28b0ffbc0ef4a6bfe09cd976454

  • SHA256

    d57e807b4b2c675744b898395ddf58b30c11fe611a614d493dbf9e5eaef146a1

  • SHA512

    d4708c3a4082d160a356efce80b2c93a43fca58c65dced2dc19fa3bae57520bcb73a256657178a9b05eaa99621ab451dacd64b08350870c13f08c6b6ed1d5746

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d57e807b4b2c675744b898395ddf58b30c11fe611a614d493dbf9e5eaef146a1

    • Size

      370KB

    • MD5

      7899e8e17e3f95a31809d38f9f7cea19

    • SHA1

      e6e111fac3b9d28b0ffbc0ef4a6bfe09cd976454

    • SHA256

      d57e807b4b2c675744b898395ddf58b30c11fe611a614d493dbf9e5eaef146a1

    • SHA512

      d4708c3a4082d160a356efce80b2c93a43fca58c65dced2dc19fa3bae57520bcb73a256657178a9b05eaa99621ab451dacd64b08350870c13f08c6b6ed1d5746

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks