General

  • Target

    c14e6d83d438a13e540880029eb39c8deb5bf43f15084ef5a99c1846724bcd9d

  • Size

    297KB

  • Sample

    241109-cxl9gavhke

  • MD5

    760a44fae0efeb621a70489c222beba0

  • SHA1

    cadbdf1516c27767317db7b0879e2995aa34c0a5

  • SHA256

    c14e6d83d438a13e540880029eb39c8deb5bf43f15084ef5a99c1846724bcd9d

  • SHA512

    83858482c63c51008c7d1d114b1023a362eaf32517c2fee26c2f68f34fb82ec09c250a94c9a7b42cd199a7e4edff5fe9cda72c87a58b931f59519f1f52fb6d64

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      c14e6d83d438a13e540880029eb39c8deb5bf43f15084ef5a99c1846724bcd9d

    • Size

      297KB

    • MD5

      760a44fae0efeb621a70489c222beba0

    • SHA1

      cadbdf1516c27767317db7b0879e2995aa34c0a5

    • SHA256

      c14e6d83d438a13e540880029eb39c8deb5bf43f15084ef5a99c1846724bcd9d

    • SHA512

      83858482c63c51008c7d1d114b1023a362eaf32517c2fee26c2f68f34fb82ec09c250a94c9a7b42cd199a7e4edff5fe9cda72c87a58b931f59519f1f52fb6d64

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks