General

  • Target

    35d4f71ba9e5953c4b319292af26b0c8d6b958dfe709edba6ec047c3b0ad0aa1

  • Size

    438KB

  • Sample

    241108-hrekbsxjgt

  • MD5

    a552bab70b6c7a30cdb73c01d646c17f

  • SHA1

    349e19f835810d3529e6c81c513d10d07c59260d

  • SHA256

    35d4f71ba9e5953c4b319292af26b0c8d6b958dfe709edba6ec047c3b0ad0aa1

  • SHA512

    8207aa40d72e5d8ad9e8b78056a0e0536945979743b8efd474157d74cdbe12e3de9922de604a920492bdc93164d50edaa266dc7d2bb6939a64db3d474cde5e64

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      35d4f71ba9e5953c4b319292af26b0c8d6b958dfe709edba6ec047c3b0ad0aa1

    • Size

      438KB

    • MD5

      a552bab70b6c7a30cdb73c01d646c17f

    • SHA1

      349e19f835810d3529e6c81c513d10d07c59260d

    • SHA256

      35d4f71ba9e5953c4b319292af26b0c8d6b958dfe709edba6ec047c3b0ad0aa1

    • SHA512

      8207aa40d72e5d8ad9e8b78056a0e0536945979743b8efd474157d74cdbe12e3de9922de604a920492bdc93164d50edaa266dc7d2bb6939a64db3d474cde5e64

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks