General

  • Target

    5edc538d2185a7f442e0dd90f3eb3b7811b6ed5dca3377a29820b4ed41e26e58

  • Size

    370KB

  • Sample

    241109-lthljssdmb

  • MD5

    53e6aff02af48c789ece853b2fd20aff

  • SHA1

    71f73cefd95535602d00a9c074f86f5331ca43a3

  • SHA256

    5edc538d2185a7f442e0dd90f3eb3b7811b6ed5dca3377a29820b4ed41e26e58

  • SHA512

    6a3c2f972a619992dfec3595cbae97d2edefe24ed61e389d56f5b82a0b7c234ad661fc26e27b19b7a4f9e6a61cdf4795a51b4f4deffdf3ae7af090adfb9e2080

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      5edc538d2185a7f442e0dd90f3eb3b7811b6ed5dca3377a29820b4ed41e26e58

    • Size

      370KB

    • MD5

      53e6aff02af48c789ece853b2fd20aff

    • SHA1

      71f73cefd95535602d00a9c074f86f5331ca43a3

    • SHA256

      5edc538d2185a7f442e0dd90f3eb3b7811b6ed5dca3377a29820b4ed41e26e58

    • SHA512

      6a3c2f972a619992dfec3595cbae97d2edefe24ed61e389d56f5b82a0b7c234ad661fc26e27b19b7a4f9e6a61cdf4795a51b4f4deffdf3ae7af090adfb9e2080

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks