General

  • Target

    23e2f6ba78ef1cf0bb0a56220fead4b82e4bbf39ebb43cf16a04f7c231fdcc81

  • Size

    373KB

  • Sample

    241108-dw4b2atkgx

  • MD5

    53f7a24b42167ab3c0a7696cb913d70e

  • SHA1

    889bcd6d068430be1df1a021d917920fabd7831e

  • SHA256

    23e2f6ba78ef1cf0bb0a56220fead4b82e4bbf39ebb43cf16a04f7c231fdcc81

  • SHA512

    e0d69ebd1cfaf48b1ba4e43fc495e2511703f1f2010cb415ca910975420adc7d570ad6c2d2b66cd2cde2417e61a404c845e705ceb2d654ca3fac07273c3f97f9

  • SSDEEP

    6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      23e2f6ba78ef1cf0bb0a56220fead4b82e4bbf39ebb43cf16a04f7c231fdcc81

    • Size

      373KB

    • MD5

      53f7a24b42167ab3c0a7696cb913d70e

    • SHA1

      889bcd6d068430be1df1a021d917920fabd7831e

    • SHA256

      23e2f6ba78ef1cf0bb0a56220fead4b82e4bbf39ebb43cf16a04f7c231fdcc81

    • SHA512

      e0d69ebd1cfaf48b1ba4e43fc495e2511703f1f2010cb415ca910975420adc7d570ad6c2d2b66cd2cde2417e61a404c845e705ceb2d654ca3fac07273c3f97f9

    • SSDEEP

      6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks