General

  • Target

    0be381f1827b94ac12aaa88ed26a9f356ed236924da89688a87f9ecf3b00d6fa

  • Size

    371KB

  • Sample

    241108-txl25svgma

  • MD5

    ab5faa4d9e643db95c5fdfa19defd93e

  • SHA1

    0db358ebed0d88d574a467ca6974bd7527c0a61d

  • SHA256

    0be381f1827b94ac12aaa88ed26a9f356ed236924da89688a87f9ecf3b00d6fa

  • SHA512

    4b1e55702bcd7a8f1bc73486220a3b20b317e8d7ab355e9bf118f9bcbb38fd2a79672e9a3beb1e04d493175e5af0c0facad3dfdf44ccdd55e08bb636f25080e2

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      0be381f1827b94ac12aaa88ed26a9f356ed236924da89688a87f9ecf3b00d6fa

    • Size

      371KB

    • MD5

      ab5faa4d9e643db95c5fdfa19defd93e

    • SHA1

      0db358ebed0d88d574a467ca6974bd7527c0a61d

    • SHA256

      0be381f1827b94ac12aaa88ed26a9f356ed236924da89688a87f9ecf3b00d6fa

    • SHA512

      4b1e55702bcd7a8f1bc73486220a3b20b317e8d7ab355e9bf118f9bcbb38fd2a79672e9a3beb1e04d493175e5af0c0facad3dfdf44ccdd55e08bb636f25080e2

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks