General

  • Target

    bf5448e4523608932521d3e655542d1fb06149f1e5d92a10c5379578e61b2b63

  • Size

    297KB

  • Sample

    241108-ljerxasmen

  • MD5

    e8eb2b44f18328d19ea4e7be01a03f22

  • SHA1

    02c28786a6e11fe12446e8f9ff154a55dcf1e203

  • SHA256

    bf5448e4523608932521d3e655542d1fb06149f1e5d92a10c5379578e61b2b63

  • SHA512

    25ce73127a28816343c85a6344fce524ad078c7f7dcbf446800f7741987feb14285bc1439edc74a210fe26df5e0cff51aff6039e146d520d9b33e1ef05114423

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      bf5448e4523608932521d3e655542d1fb06149f1e5d92a10c5379578e61b2b63

    • Size

      297KB

    • MD5

      e8eb2b44f18328d19ea4e7be01a03f22

    • SHA1

      02c28786a6e11fe12446e8f9ff154a55dcf1e203

    • SHA256

      bf5448e4523608932521d3e655542d1fb06149f1e5d92a10c5379578e61b2b63

    • SHA512

      25ce73127a28816343c85a6344fce524ad078c7f7dcbf446800f7741987feb14285bc1439edc74a210fe26df5e0cff51aff6039e146d520d9b33e1ef05114423

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks