General

  • Target

    2843041639dc0e3e4ca2180c882512408906c089264c0ccabf2d06b00852b433

  • Size

    298KB

  • Sample

    241108-g9b2gswqhs

  • MD5

    e9198cb1101c8532321a190bc09c8e23

  • SHA1

    15b2a4f565842eaf0882f1745e15abdceb93c76e

  • SHA256

    2843041639dc0e3e4ca2180c882512408906c089264c0ccabf2d06b00852b433

  • SHA512

    5c321a817df56c2725fb0f2815373f06c160c84be37a7501c3da4d4d991dbfb4ffc9e44e3b2e0ed8e0c086dc8967723b3259a38a27a80bf6bba73111d88c8c16

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2843041639dc0e3e4ca2180c882512408906c089264c0ccabf2d06b00852b433

    • Size

      298KB

    • MD5

      e9198cb1101c8532321a190bc09c8e23

    • SHA1

      15b2a4f565842eaf0882f1745e15abdceb93c76e

    • SHA256

      2843041639dc0e3e4ca2180c882512408906c089264c0ccabf2d06b00852b433

    • SHA512

      5c321a817df56c2725fb0f2815373f06c160c84be37a7501c3da4d4d991dbfb4ffc9e44e3b2e0ed8e0c086dc8967723b3259a38a27a80bf6bba73111d88c8c16

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks