General

  • Target

    456ba429047ee56c55a6baa8f406238fab040dbbc8e09f219a1beef1022cbd72

  • Size

    423KB

  • Sample

    241109-h5nedszgkh

  • MD5

    457683eaceedb0c3ddb7330a6215332a

  • SHA1

    f72753e3cd78abf4c6244985ef3c269815cecd7e

  • SHA256

    456ba429047ee56c55a6baa8f406238fab040dbbc8e09f219a1beef1022cbd72

  • SHA512

    ab2287d8e058c66c218f957971bdd2c02e0314e6eda122c46a39fef94ec60402f8995c1e8379373e3d36ff0592c84d081dd364db16c286605b9cdb62da3ddf97

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      456ba429047ee56c55a6baa8f406238fab040dbbc8e09f219a1beef1022cbd72

    • Size

      423KB

    • MD5

      457683eaceedb0c3ddb7330a6215332a

    • SHA1

      f72753e3cd78abf4c6244985ef3c269815cecd7e

    • SHA256

      456ba429047ee56c55a6baa8f406238fab040dbbc8e09f219a1beef1022cbd72

    • SHA512

      ab2287d8e058c66c218f957971bdd2c02e0314e6eda122c46a39fef94ec60402f8995c1e8379373e3d36ff0592c84d081dd364db16c286605b9cdb62da3ddf97

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks