General

  • Target

    016958debeb4ca83ec7daeaaf8df365d2db78c664e96bb8dae22e35c77629507

  • Size

    371KB

  • Sample

    241109-1y43nssmbw

  • MD5

    2440a84391b0c72800cabbf47694e38f

  • SHA1

    fc83ee84a04f8d34d660721bc1b13c0e159eae8d

  • SHA256

    016958debeb4ca83ec7daeaaf8df365d2db78c664e96bb8dae22e35c77629507

  • SHA512

    8c1635b4a4169fac8f3d970ccddbee2237113c6f16d92b3e20958c05d335ae30deb2be390a5208fd63738d451c64e71f50c38c42b2cf2563d0ec7ce7c690e973

  • SSDEEP

    6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      016958debeb4ca83ec7daeaaf8df365d2db78c664e96bb8dae22e35c77629507

    • Size

      371KB

    • MD5

      2440a84391b0c72800cabbf47694e38f

    • SHA1

      fc83ee84a04f8d34d660721bc1b13c0e159eae8d

    • SHA256

      016958debeb4ca83ec7daeaaf8df365d2db78c664e96bb8dae22e35c77629507

    • SHA512

      8c1635b4a4169fac8f3d970ccddbee2237113c6f16d92b3e20958c05d335ae30deb2be390a5208fd63738d451c64e71f50c38c42b2cf2563d0ec7ce7c690e973

    • SSDEEP

      6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks