General

  • Target

    26792d7567d70d48a4c07ed56118626290e9207759d08b5c904b28236bcaf2cb

  • Size

    438KB

  • Sample

    241108-mjcszs1bqd

  • MD5

    935c285c6e1157660842ea91c9f4a55d

  • SHA1

    0b60c19f6d1fe9a3a8460f0ec8a56d70f57c6f57

  • SHA256

    26792d7567d70d48a4c07ed56118626290e9207759d08b5c904b28236bcaf2cb

  • SHA512

    db04f79f9193dd1091276dd01a4f37d2719494b6a2c84f82784d19a40676a58f206cebc25fece82013da336b89ed523315d94ea4d6283cca5191660cd1997a84

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      26792d7567d70d48a4c07ed56118626290e9207759d08b5c904b28236bcaf2cb

    • Size

      438KB

    • MD5

      935c285c6e1157660842ea91c9f4a55d

    • SHA1

      0b60c19f6d1fe9a3a8460f0ec8a56d70f57c6f57

    • SHA256

      26792d7567d70d48a4c07ed56118626290e9207759d08b5c904b28236bcaf2cb

    • SHA512

      db04f79f9193dd1091276dd01a4f37d2719494b6a2c84f82784d19a40676a58f206cebc25fece82013da336b89ed523315d94ea4d6283cca5191660cd1997a84

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks