General

  • Target

    c165b09ed5ab5f1c08c167c84484cc67e3468265243dacf31357b1a0836f55a5

  • Size

    411KB

  • Sample

    241108-nesjba1flb

  • MD5

    fae70ab53723eef64c61272911029a65

  • SHA1

    e8941dde92fb5e1a4fdd700ecc6cd57ae621de66

  • SHA256

    c165b09ed5ab5f1c08c167c84484cc67e3468265243dacf31357b1a0836f55a5

  • SHA512

    d56ad605540a8759056a8e436bab036a52eec4430cc9b5e599fc23ab37efd16acae9b740d05e8967110596e962fad8ff6a3d7491c0e293f2de9a0eff76fdec67

  • SSDEEP

    6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      c165b09ed5ab5f1c08c167c84484cc67e3468265243dacf31357b1a0836f55a5

    • Size

      411KB

    • MD5

      fae70ab53723eef64c61272911029a65

    • SHA1

      e8941dde92fb5e1a4fdd700ecc6cd57ae621de66

    • SHA256

      c165b09ed5ab5f1c08c167c84484cc67e3468265243dacf31357b1a0836f55a5

    • SHA512

      d56ad605540a8759056a8e436bab036a52eec4430cc9b5e599fc23ab37efd16acae9b740d05e8967110596e962fad8ff6a3d7491c0e293f2de9a0eff76fdec67

    • SSDEEP

      6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks