General

  • Target

    9c3579ccd07d66717eb876c3b3e8558ca771d86308bdfa2b45b505f3838d1983

  • Size

    423KB

  • Sample

    241108-xl5a5axemh

  • MD5

    a16f7d6954d7db16388434eab6260078

  • SHA1

    a4b455dbef4837ab7c33d7becaa9fa683beb0c8d

  • SHA256

    9c3579ccd07d66717eb876c3b3e8558ca771d86308bdfa2b45b505f3838d1983

  • SHA512

    4e199884ff8fa3a8c56da2aada293bc4210d7ccbf25d81cf20222fe1ea06bae6c28423d324ca504730d543b0522ecfac0234f10a3929d5a9b766f9e02d825407

  • SSDEEP

    6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      9c3579ccd07d66717eb876c3b3e8558ca771d86308bdfa2b45b505f3838d1983

    • Size

      423KB

    • MD5

      a16f7d6954d7db16388434eab6260078

    • SHA1

      a4b455dbef4837ab7c33d7becaa9fa683beb0c8d

    • SHA256

      9c3579ccd07d66717eb876c3b3e8558ca771d86308bdfa2b45b505f3838d1983

    • SHA512

      4e199884ff8fa3a8c56da2aada293bc4210d7ccbf25d81cf20222fe1ea06bae6c28423d324ca504730d543b0522ecfac0234f10a3929d5a9b766f9e02d825407

    • SSDEEP

      6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks