General

  • Target

    57e03e1c47499e085d6a5d231ddf256670fdc375a8552fa942514e748725a4c8

  • Size

    423KB

  • Sample

    241108-xb1vysxelq

  • MD5

    b2f7343aad64939b04fc60288713aefd

  • SHA1

    0880b010a18a13f6d287741b4b193691f3a6e2cf

  • SHA256

    57e03e1c47499e085d6a5d231ddf256670fdc375a8552fa942514e748725a4c8

  • SHA512

    f70503a46d6d1781e4833965109a83dadc8d1bda82b6f019b66f120d39139df3124b3143e0a2ec84baf43922328f7ba0005e022e2b4a4e553c65abb7b3081f40

  • SSDEEP

    6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      57e03e1c47499e085d6a5d231ddf256670fdc375a8552fa942514e748725a4c8

    • Size

      423KB

    • MD5

      b2f7343aad64939b04fc60288713aefd

    • SHA1

      0880b010a18a13f6d287741b4b193691f3a6e2cf

    • SHA256

      57e03e1c47499e085d6a5d231ddf256670fdc375a8552fa942514e748725a4c8

    • SHA512

      f70503a46d6d1781e4833965109a83dadc8d1bda82b6f019b66f120d39139df3124b3143e0a2ec84baf43922328f7ba0005e022e2b4a4e553c65abb7b3081f40

    • SSDEEP

      6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks