General

  • Target

    a1851bb4ef3f1c8ecfa811864c65cfd9794ad9e9aeaa17d67adcdc5d73ac65b2

  • Size

    427KB

  • Sample

    241108-h5htxaxlgs

  • MD5

    eebafa06822ce758bbfe8a6443dd217d

  • SHA1

    ede7d3008fe577ffd9efe72bb16bb66e7d67fa2d

  • SHA256

    a1851bb4ef3f1c8ecfa811864c65cfd9794ad9e9aeaa17d67adcdc5d73ac65b2

  • SHA512

    f37e39ae9ab23964eb007a0e6cbf6e33c7cf3e966e680c280cc04be5b394c7a9ee06aa687b720d0d47354caefa74c792d52431d27afde51a90ff2de8198d04b3

  • SSDEEP

    12288:bI98VfhyNpDL3EwI6si3LbQMojbyZSnPsUx34:gx1EwNCyOP9S

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a1851bb4ef3f1c8ecfa811864c65cfd9794ad9e9aeaa17d67adcdc5d73ac65b2

    • Size

      427KB

    • MD5

      eebafa06822ce758bbfe8a6443dd217d

    • SHA1

      ede7d3008fe577ffd9efe72bb16bb66e7d67fa2d

    • SHA256

      a1851bb4ef3f1c8ecfa811864c65cfd9794ad9e9aeaa17d67adcdc5d73ac65b2

    • SHA512

      f37e39ae9ab23964eb007a0e6cbf6e33c7cf3e966e680c280cc04be5b394c7a9ee06aa687b720d0d47354caefa74c792d52431d27afde51a90ff2de8198d04b3

    • SSDEEP

      12288:bI98VfhyNpDL3EwI6si3LbQMojbyZSnPsUx34:gx1EwNCyOP9S

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks