General

  • Target

    8988c1aa12be4ee4cc6ca7d58b25655b03c5b4c5dcdb8b4c24cdcc2ffca01993

  • Size

    438KB

  • Sample

    241108-x3km2sxkg1

  • MD5

    d06bf7cfef4f9166e1020f1920469997

  • SHA1

    04cb3a7234744e96fcd936a98f3ca7dcfe546282

  • SHA256

    8988c1aa12be4ee4cc6ca7d58b25655b03c5b4c5dcdb8b4c24cdcc2ffca01993

  • SHA512

    5bd2e442fe82a748178230a7dd5a1b5529165d9360615bd0db59486bceaab720568d3955c5e6614243c5abfcd670bb8232780c76541903bbd3c9855646e03219

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      8988c1aa12be4ee4cc6ca7d58b25655b03c5b4c5dcdb8b4c24cdcc2ffca01993

    • Size

      438KB

    • MD5

      d06bf7cfef4f9166e1020f1920469997

    • SHA1

      04cb3a7234744e96fcd936a98f3ca7dcfe546282

    • SHA256

      8988c1aa12be4ee4cc6ca7d58b25655b03c5b4c5dcdb8b4c24cdcc2ffca01993

    • SHA512

      5bd2e442fe82a748178230a7dd5a1b5529165d9360615bd0db59486bceaab720568d3955c5e6614243c5abfcd670bb8232780c76541903bbd3c9855646e03219

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks