General

  • Target

    3b18bb24bb6fd8aea2a4d85faeb09ee5c9fee44743744ba23a47be0c9f5467fe

  • Size

    298KB

  • Sample

    241109-fbkejaxkdz

  • MD5

    2d596bf8b96387b122ad7d08d3c33c3c

  • SHA1

    b478c12cf78e425da36619317024dddb83a22850

  • SHA256

    3b18bb24bb6fd8aea2a4d85faeb09ee5c9fee44743744ba23a47be0c9f5467fe

  • SHA512

    1c4d15417bfb7b0ff79bc3c52a35e95365825cbbdf44813e378d746b41023de61ed1a2b7efb6b2ced610e5efd12812ddf15e0edc75d8b6a0e220e35c72bec3ee

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      3b18bb24bb6fd8aea2a4d85faeb09ee5c9fee44743744ba23a47be0c9f5467fe

    • Size

      298KB

    • MD5

      2d596bf8b96387b122ad7d08d3c33c3c

    • SHA1

      b478c12cf78e425da36619317024dddb83a22850

    • SHA256

      3b18bb24bb6fd8aea2a4d85faeb09ee5c9fee44743744ba23a47be0c9f5467fe

    • SHA512

      1c4d15417bfb7b0ff79bc3c52a35e95365825cbbdf44813e378d746b41023de61ed1a2b7efb6b2ced610e5efd12812ddf15e0edc75d8b6a0e220e35c72bec3ee

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks