General

  • Target

    e1e873234b6d072f70cffbe3f7b11c9e38c7e6c5817548bc63d1f575d06fc534

  • Size

    302KB

  • Sample

    241109-1vwxwstbpl

  • MD5

    4590209a8a81f6e2d0d46ee97a8f2245

  • SHA1

    8caddee05dfa74e3f998141f8e3878dad8ce151b

  • SHA256

    e1e873234b6d072f70cffbe3f7b11c9e38c7e6c5817548bc63d1f575d06fc534

  • SHA512

    88afcf6e62f79aa56d4419efc956b23275b9b1b952b009d9082251e9a2f5e9e46b88ec702e555582b333d98a64f3d871c04a2492ede40d8423c0590f4831e769

  • SSDEEP

    3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      e1e873234b6d072f70cffbe3f7b11c9e38c7e6c5817548bc63d1f575d06fc534

    • Size

      302KB

    • MD5

      4590209a8a81f6e2d0d46ee97a8f2245

    • SHA1

      8caddee05dfa74e3f998141f8e3878dad8ce151b

    • SHA256

      e1e873234b6d072f70cffbe3f7b11c9e38c7e6c5817548bc63d1f575d06fc534

    • SHA512

      88afcf6e62f79aa56d4419efc956b23275b9b1b952b009d9082251e9a2f5e9e46b88ec702e555582b333d98a64f3d871c04a2492ede40d8423c0590f4831e769

    • SSDEEP

      3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks