General

  • Target

    7a1053454516248b656e265ea4eff9df90456abb82116434c1a9f5c9273a3167

  • Size

    298KB

  • Sample

    241108-ea158avdla

  • MD5

    f91c72467b7f8201f3b0d73dd36fcd5d

  • SHA1

    f944501552d3638b2fb2a95d9b2af3e7ccbe60a9

  • SHA256

    7a1053454516248b656e265ea4eff9df90456abb82116434c1a9f5c9273a3167

  • SHA512

    7b79f41cc99a78a78602372f45b4650e356eb11e267f0fcc2c0f737c562e5c0a7b6dc649a9f314ffbe5a82a0416612339582f98e3aabc13fc6feec014e6fd328

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7a1053454516248b656e265ea4eff9df90456abb82116434c1a9f5c9273a3167

    • Size

      298KB

    • MD5

      f91c72467b7f8201f3b0d73dd36fcd5d

    • SHA1

      f944501552d3638b2fb2a95d9b2af3e7ccbe60a9

    • SHA256

      7a1053454516248b656e265ea4eff9df90456abb82116434c1a9f5c9273a3167

    • SHA512

      7b79f41cc99a78a78602372f45b4650e356eb11e267f0fcc2c0f737c562e5c0a7b6dc649a9f314ffbe5a82a0416612339582f98e3aabc13fc6feec014e6fd328

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks