General

  • Target

    1e4ad781f691d491c9456b10cd4f952fec4d7182321e91ebcd777eb118f2d99b

  • Size

    423KB

  • Sample

    241109-f9mbsayepd

  • MD5

    30def2b0930d4c865135fce381564d45

  • SHA1

    0f92c800540948781f3add6721a6013b7e455af8

  • SHA256

    1e4ad781f691d491c9456b10cd4f952fec4d7182321e91ebcd777eb118f2d99b

  • SHA512

    a3a420c13431e855b9b432fd65d4f5230f3d2398dc17765c605babc54c9fd28d358f4b076e7b2c75b8a85a539b83a4774112e15c653bbb37b2ad8f8d09a595c1

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      1e4ad781f691d491c9456b10cd4f952fec4d7182321e91ebcd777eb118f2d99b

    • Size

      423KB

    • MD5

      30def2b0930d4c865135fce381564d45

    • SHA1

      0f92c800540948781f3add6721a6013b7e455af8

    • SHA256

      1e4ad781f691d491c9456b10cd4f952fec4d7182321e91ebcd777eb118f2d99b

    • SHA512

      a3a420c13431e855b9b432fd65d4f5230f3d2398dc17765c605babc54c9fd28d358f4b076e7b2c75b8a85a539b83a4774112e15c653bbb37b2ad8f8d09a595c1

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks