General

  • Target

    081e9fea0f23e7bfadf3cddbf522c7ff325225bbc3ffeadf23dc5025f82fec5e

  • Size

    438KB

  • Sample

    241109-lda7ja1mat

  • MD5

    1d352cabe23c80093cf485b0575a5002

  • SHA1

    2b70d36886d658ba1f788b693c8c36b072ae4f46

  • SHA256

    081e9fea0f23e7bfadf3cddbf522c7ff325225bbc3ffeadf23dc5025f82fec5e

  • SHA512

    0397994c64b030e5a15d9358d02877c81189b442bdebe6a3cd55a57455080d0b6993d88909b9f37e7b7d3b2a7a70e60521f40ff015e95c1e5d5b639cccec8311

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      081e9fea0f23e7bfadf3cddbf522c7ff325225bbc3ffeadf23dc5025f82fec5e

    • Size

      438KB

    • MD5

      1d352cabe23c80093cf485b0575a5002

    • SHA1

      2b70d36886d658ba1f788b693c8c36b072ae4f46

    • SHA256

      081e9fea0f23e7bfadf3cddbf522c7ff325225bbc3ffeadf23dc5025f82fec5e

    • SHA512

      0397994c64b030e5a15d9358d02877c81189b442bdebe6a3cd55a57455080d0b6993d88909b9f37e7b7d3b2a7a70e60521f40ff015e95c1e5d5b639cccec8311

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks