General

  • Target

    db03908240d0398ad3da04e3377d24825b92edb13e2d8665eff51e97395d7939

  • Size

    422KB

  • Sample

    241108-mmq5sa1crn

  • MD5

    b7efc05a4ab349a17ae8fb7c0dc3334f

  • SHA1

    d9be9ca822a783add287276cc96bf3843128f1fe

  • SHA256

    db03908240d0398ad3da04e3377d24825b92edb13e2d8665eff51e97395d7939

  • SHA512

    5b47bd5ee86e85787697e20cd18262b388203db65df46f68ab9e0c72df0414d24a5e208c1ad01b0e9e1de9c4e6eb5d018d304f3413cb4b7be7aa350bf086f078

  • SSDEEP

    12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      db03908240d0398ad3da04e3377d24825b92edb13e2d8665eff51e97395d7939

    • Size

      422KB

    • MD5

      b7efc05a4ab349a17ae8fb7c0dc3334f

    • SHA1

      d9be9ca822a783add287276cc96bf3843128f1fe

    • SHA256

      db03908240d0398ad3da04e3377d24825b92edb13e2d8665eff51e97395d7939

    • SHA512

      5b47bd5ee86e85787697e20cd18262b388203db65df46f68ab9e0c72df0414d24a5e208c1ad01b0e9e1de9c4e6eb5d018d304f3413cb4b7be7aa350bf086f078

    • SSDEEP

      12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks