General

  • Target

    f5307689b799db7a93950ada967ce35566e04ffc88816fb0c0374f1e39b74dcf

  • Size

    423KB

  • Sample

    241108-yej72sydjj

  • MD5

    d071b3266cb37a5cbea96f96dee654ec

  • SHA1

    5a3e0b8290ffc78826c0200a3447c3c95973eb53

  • SHA256

    f5307689b799db7a93950ada967ce35566e04ffc88816fb0c0374f1e39b74dcf

  • SHA512

    9ed73c6484735eda5a59fb7f984b177050c3d07edf49959128d1b9eb6a3e1b03b99458be066b15c098b03706f3661582efabd066d76259f31ab108b06344c0bf

  • SSDEEP

    6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f5307689b799db7a93950ada967ce35566e04ffc88816fb0c0374f1e39b74dcf

    • Size

      423KB

    • MD5

      d071b3266cb37a5cbea96f96dee654ec

    • SHA1

      5a3e0b8290ffc78826c0200a3447c3c95973eb53

    • SHA256

      f5307689b799db7a93950ada967ce35566e04ffc88816fb0c0374f1e39b74dcf

    • SHA512

      9ed73c6484735eda5a59fb7f984b177050c3d07edf49959128d1b9eb6a3e1b03b99458be066b15c098b03706f3661582efabd066d76259f31ab108b06344c0bf

    • SSDEEP

      6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks