General

  • Target

    b593100aabba69605b4fbd6f1efdab4eebeb267f2e16c5a7645275eb7f0a14b9

  • Size

    410KB

  • Sample

    241109-bcdwxstenh

  • MD5

    e866b79b7a1f4f90c2db47ddd83fad8f

  • SHA1

    1ae480ec390ab4e18f876ce64e87bfea272d2d6f

  • SHA256

    b593100aabba69605b4fbd6f1efdab4eebeb267f2e16c5a7645275eb7f0a14b9

  • SHA512

    92be7acd1c798d2f43b8c67f0dfa41683437238b6a342b368e5fdf777cd27f84ad1bce0b55b914d1b8584821310d73fd8cb2dfa783668e98d9243db4e663cbe5

  • SSDEEP

    6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      b593100aabba69605b4fbd6f1efdab4eebeb267f2e16c5a7645275eb7f0a14b9

    • Size

      410KB

    • MD5

      e866b79b7a1f4f90c2db47ddd83fad8f

    • SHA1

      1ae480ec390ab4e18f876ce64e87bfea272d2d6f

    • SHA256

      b593100aabba69605b4fbd6f1efdab4eebeb267f2e16c5a7645275eb7f0a14b9

    • SHA512

      92be7acd1c798d2f43b8c67f0dfa41683437238b6a342b368e5fdf777cd27f84ad1bce0b55b914d1b8584821310d73fd8cb2dfa783668e98d9243db4e663cbe5

    • SSDEEP

      6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks