General

  • Target

    18d8221fa7c3430c5bdd4cbf4a47bc4810b24cb05bb2f40c789b5e38c67db6b8

  • Size

    298KB

  • Sample

    241109-kx9zja1jhs

  • MD5

    d9b0237e93dc8858dfb6fbe9d20b5338

  • SHA1

    da3c658033775fa422852ae5a7a7cd6bf961161a

  • SHA256

    18d8221fa7c3430c5bdd4cbf4a47bc4810b24cb05bb2f40c789b5e38c67db6b8

  • SHA512

    99a3ee78e4aeb9c4260de589bcccf06895a3ed38193d1b3259499949be760ddc647594fb13ee256317be050bee5c2292fbf8252179e7676ba6b183bd7aeb04dd

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      18d8221fa7c3430c5bdd4cbf4a47bc4810b24cb05bb2f40c789b5e38c67db6b8

    • Size

      298KB

    • MD5

      d9b0237e93dc8858dfb6fbe9d20b5338

    • SHA1

      da3c658033775fa422852ae5a7a7cd6bf961161a

    • SHA256

      18d8221fa7c3430c5bdd4cbf4a47bc4810b24cb05bb2f40c789b5e38c67db6b8

    • SHA512

      99a3ee78e4aeb9c4260de589bcccf06895a3ed38193d1b3259499949be760ddc647594fb13ee256317be050bee5c2292fbf8252179e7676ba6b183bd7aeb04dd

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks