General

  • Target

    1c390a0d6b9c0edfb2dd689afb040196441157537ebfd4ed6d59a51cd01fd855

  • Size

    297KB

  • Sample

    241108-c8xjksspby

  • MD5

    964d94e47c29178674747a9bebaa713d

  • SHA1

    5d9bc539b7443186dcaf407f669b9c005ad2f5a8

  • SHA256

    1c390a0d6b9c0edfb2dd689afb040196441157537ebfd4ed6d59a51cd01fd855

  • SHA512

    4b3cf1a74cf20308e22c781fada83a07d9f473d1e9c0da39e2b329a9bb89b0221c2ba7f5b2e41f47b48c1e52282b1729a98cca4faa8fd896fe619af1082b7430

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      1c390a0d6b9c0edfb2dd689afb040196441157537ebfd4ed6d59a51cd01fd855

    • Size

      297KB

    • MD5

      964d94e47c29178674747a9bebaa713d

    • SHA1

      5d9bc539b7443186dcaf407f669b9c005ad2f5a8

    • SHA256

      1c390a0d6b9c0edfb2dd689afb040196441157537ebfd4ed6d59a51cd01fd855

    • SHA512

      4b3cf1a74cf20308e22c781fada83a07d9f473d1e9c0da39e2b329a9bb89b0221c2ba7f5b2e41f47b48c1e52282b1729a98cca4faa8fd896fe619af1082b7430

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks