General

  • Target

    15449437c3adade8f8f097460271b3cb6264bbc449c5f1b9c79f86d6d93ccb69

  • Size

    427KB

  • Sample

    241109-gr329asjek

  • MD5

    dd41824b4d728b37b97371ae6920a5fe

  • SHA1

    22d2423eb4d7cece6cc043ae2debe6ce41f76232

  • SHA256

    15449437c3adade8f8f097460271b3cb6264bbc449c5f1b9c79f86d6d93ccb69

  • SHA512

    200e1dbad18670477a813b853cda56a9fe985a51116bd4f3a7ca540b66fe9e1dedab4047ac2af694b798bcb7232f914df32fbcff03f6fb68f4c50f2d0b5ee98c

  • SSDEEP

    6144:B0NMGv1CXJ7ATf6/5e2R98GDETSGhcTdzhSWa7OJ/thn/IyG8Fzk:BlGdICf6/5fvETSGhcTdzcWaAnAy0

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      15449437c3adade8f8f097460271b3cb6264bbc449c5f1b9c79f86d6d93ccb69

    • Size

      427KB

    • MD5

      dd41824b4d728b37b97371ae6920a5fe

    • SHA1

      22d2423eb4d7cece6cc043ae2debe6ce41f76232

    • SHA256

      15449437c3adade8f8f097460271b3cb6264bbc449c5f1b9c79f86d6d93ccb69

    • SHA512

      200e1dbad18670477a813b853cda56a9fe985a51116bd4f3a7ca540b66fe9e1dedab4047ac2af694b798bcb7232f914df32fbcff03f6fb68f4c50f2d0b5ee98c

    • SSDEEP

      6144:B0NMGv1CXJ7ATf6/5e2R98GDETSGhcTdzhSWa7OJ/thn/IyG8Fzk:BlGdICf6/5fvETSGhcTdzcWaAnAy0

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks