General

  • Target

    01411d7c42bc69034ed61734a62b5bbf79abf1f00590cae5f3b7d5c48d88721c

  • Size

    298KB

  • Sample

    241109-fnjnrs1lan

  • MD5

    283b4756cd12351b073fca5434af875b

  • SHA1

    3911b76aa227c195a44b7768d9ab65901553fade

  • SHA256

    01411d7c42bc69034ed61734a62b5bbf79abf1f00590cae5f3b7d5c48d88721c

  • SHA512

    0916be0075a324e8f49c01930401073ec637278d1a14bafc370119b11abe93fd0ec18fba6421eb1ef57608e3320044ac72f67f589bfb2a78973e6d450c92db39

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      01411d7c42bc69034ed61734a62b5bbf79abf1f00590cae5f3b7d5c48d88721c

    • Size

      298KB

    • MD5

      283b4756cd12351b073fca5434af875b

    • SHA1

      3911b76aa227c195a44b7768d9ab65901553fade

    • SHA256

      01411d7c42bc69034ed61734a62b5bbf79abf1f00590cae5f3b7d5c48d88721c

    • SHA512

      0916be0075a324e8f49c01930401073ec637278d1a14bafc370119b11abe93fd0ec18fba6421eb1ef57608e3320044ac72f67f589bfb2a78973e6d450c92db39

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks