General

  • Target

    01d7a51679050aa6021dffde8a07cb1fb68a1fa65e656a9ab21462e4c84cc540

  • Size

    438KB

  • Sample

    241109-d1js7awjht

  • MD5

    8f08836dbccdb36708ab340d8e9a7e4e

  • SHA1

    4865ca7338c88427efd583557c5dde36b0b4f04c

  • SHA256

    01d7a51679050aa6021dffde8a07cb1fb68a1fa65e656a9ab21462e4c84cc540

  • SHA512

    3ea39f17edaa44ad79f4726a858cb323ea133de60933afbf236db40a4685df875745f807b6a325951aec4a5305217096e0cfe28c2a74a1b1751d76c932a18c09

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      01d7a51679050aa6021dffde8a07cb1fb68a1fa65e656a9ab21462e4c84cc540

    • Size

      438KB

    • MD5

      8f08836dbccdb36708ab340d8e9a7e4e

    • SHA1

      4865ca7338c88427efd583557c5dde36b0b4f04c

    • SHA256

      01d7a51679050aa6021dffde8a07cb1fb68a1fa65e656a9ab21462e4c84cc540

    • SHA512

      3ea39f17edaa44ad79f4726a858cb323ea133de60933afbf236db40a4685df875745f807b6a325951aec4a5305217096e0cfe28c2a74a1b1751d76c932a18c09

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks