General

  • Target

    4c4b672748108d80b750116e1e259cd472270d22a7e349d42889f2508895172a

  • Size

    438KB

  • Sample

    241109-fppleaybkp

  • MD5

    5f098939381b10fbd4b1b7130732ce58

  • SHA1

    ce89fcd1c827ba78926152abeaca8b53a850c380

  • SHA256

    4c4b672748108d80b750116e1e259cd472270d22a7e349d42889f2508895172a

  • SHA512

    40782291a63d737e2f65d578aa6303bc1f3e326cd4abadd1d42bdef8fb6aabec1ab5750200411b30a1455cf809ec6ca8f961d43335f3979ef061f83f226c460c

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      4c4b672748108d80b750116e1e259cd472270d22a7e349d42889f2508895172a

    • Size

      438KB

    • MD5

      5f098939381b10fbd4b1b7130732ce58

    • SHA1

      ce89fcd1c827ba78926152abeaca8b53a850c380

    • SHA256

      4c4b672748108d80b750116e1e259cd472270d22a7e349d42889f2508895172a

    • SHA512

      40782291a63d737e2f65d578aa6303bc1f3e326cd4abadd1d42bdef8fb6aabec1ab5750200411b30a1455cf809ec6ca8f961d43335f3979ef061f83f226c460c

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks