General

  • Target

    d3718b5832859d8f6fa279b0b80e69c403c3f3424192142edb12555061814058

  • Size

    438KB

  • Sample

    241109-alaeessle1

  • MD5

    173c2d2ac7b90453f876cd1402f7cfce

  • SHA1

    f372fced54061b8afb038c1a2aab476eb555e82d

  • SHA256

    d3718b5832859d8f6fa279b0b80e69c403c3f3424192142edb12555061814058

  • SHA512

    192036c0c8735e6a4e8381d051e88d252f5495803a3453a9d0917403bf6119ba88a15311841d0a2c544af0c702d8efaf2ee7e96ae37d3021cceebf3855ad9da4

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d3718b5832859d8f6fa279b0b80e69c403c3f3424192142edb12555061814058

    • Size

      438KB

    • MD5

      173c2d2ac7b90453f876cd1402f7cfce

    • SHA1

      f372fced54061b8afb038c1a2aab476eb555e82d

    • SHA256

      d3718b5832859d8f6fa279b0b80e69c403c3f3424192142edb12555061814058

    • SHA512

      192036c0c8735e6a4e8381d051e88d252f5495803a3453a9d0917403bf6119ba88a15311841d0a2c544af0c702d8efaf2ee7e96ae37d3021cceebf3855ad9da4

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks