General

  • Target

    08b46c8ce21b3b5d68538685dccc6a54eb9390dcd91fa4a88f4e6e87492fe6c8

  • Size

    383KB

  • Sample

    241108-bm536a1mat

  • MD5

    1f80b4497c9d7459b53823541e44552a

  • SHA1

    abac954b360bc13aea4ac42d1883769d3dc51594

  • SHA256

    08b46c8ce21b3b5d68538685dccc6a54eb9390dcd91fa4a88f4e6e87492fe6c8

  • SHA512

    0a390a78c399b6e5066a7b8e4a518c841528b0414b7120af42f31fdea2642cc20d25ad0d6951c81b9eec3d40f2c3776bf71bf41fc8ad0c8b4849643f76dfd71b

  • SSDEEP

    6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      08b46c8ce21b3b5d68538685dccc6a54eb9390dcd91fa4a88f4e6e87492fe6c8

    • Size

      383KB

    • MD5

      1f80b4497c9d7459b53823541e44552a

    • SHA1

      abac954b360bc13aea4ac42d1883769d3dc51594

    • SHA256

      08b46c8ce21b3b5d68538685dccc6a54eb9390dcd91fa4a88f4e6e87492fe6c8

    • SHA512

      0a390a78c399b6e5066a7b8e4a518c841528b0414b7120af42f31fdea2642cc20d25ad0d6951c81b9eec3d40f2c3776bf71bf41fc8ad0c8b4849643f76dfd71b

    • SSDEEP

      6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks