General

  • Target

    83cd0ca13e556f57888d503c462d0b2f2a5e5acb6516b86bd78f71aa5cac8784

  • Size

    297KB

  • Sample

    241108-xnn2xszngm

  • MD5

    f2b2daeaa29639289c2b202d3ba7e2a0

  • SHA1

    540cc74da29b5fa7a14b450ea7197ff874f8e140

  • SHA256

    83cd0ca13e556f57888d503c462d0b2f2a5e5acb6516b86bd78f71aa5cac8784

  • SHA512

    3d1f2a6357690e88901bb7b55372909f04ec80c6d84fa89fa1bf77da2ffd5b1c53480c67cebb88ff928a79c947fd6ab479470f8c1d9035bdb7b824fadc01655a

  • SSDEEP

    6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      83cd0ca13e556f57888d503c462d0b2f2a5e5acb6516b86bd78f71aa5cac8784

    • Size

      297KB

    • MD5

      f2b2daeaa29639289c2b202d3ba7e2a0

    • SHA1

      540cc74da29b5fa7a14b450ea7197ff874f8e140

    • SHA256

      83cd0ca13e556f57888d503c462d0b2f2a5e5acb6516b86bd78f71aa5cac8784

    • SHA512

      3d1f2a6357690e88901bb7b55372909f04ec80c6d84fa89fa1bf77da2ffd5b1c53480c67cebb88ff928a79c947fd6ab479470f8c1d9035bdb7b824fadc01655a

    • SSDEEP

      6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks