General

  • Target

    5e43d8f0b78f99baa3f0fac95a4fcee127c752c30eaf90bdb3413d8608800c75

  • Size

    371KB

  • Sample

    241108-jz7frayfkb

  • MD5

    92095d183d5c0817790a4041cffc4006

  • SHA1

    e364dc61f09f060465eb53753fb44c9f87f27200

  • SHA256

    5e43d8f0b78f99baa3f0fac95a4fcee127c752c30eaf90bdb3413d8608800c75

  • SHA512

    a553fc5afd69a788e20cb79a7115851168c73dcfc66ddf739100f9ec14c8ab0ff25173267925fd3c7cc67821d8d5fa2de97021917f0c2099a7db9170c0de7f96

  • SSDEEP

    6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      5e43d8f0b78f99baa3f0fac95a4fcee127c752c30eaf90bdb3413d8608800c75

    • Size

      371KB

    • MD5

      92095d183d5c0817790a4041cffc4006

    • SHA1

      e364dc61f09f060465eb53753fb44c9f87f27200

    • SHA256

      5e43d8f0b78f99baa3f0fac95a4fcee127c752c30eaf90bdb3413d8608800c75

    • SHA512

      a553fc5afd69a788e20cb79a7115851168c73dcfc66ddf739100f9ec14c8ab0ff25173267925fd3c7cc67821d8d5fa2de97021917f0c2099a7db9170c0de7f96

    • SSDEEP

      6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks