General

  • Target

    001d5796ff1df78cda48a9afeaeb04063049d0980f996bd14f311b19154f48c3

  • Size

    394KB

  • Sample

    241109-mbebvavqdj

  • MD5

    b846744b50afe3e0a41c9b6fbdc21756

  • SHA1

    1b156477b9288228225d52773d034485ab56ff92

  • SHA256

    001d5796ff1df78cda48a9afeaeb04063049d0980f996bd14f311b19154f48c3

  • SHA512

    759402a73c98e5a05e8957ce72ea3a0745a0db427c606b95af1b9e8e401660c3469d134f6fb57677c63be0502e9e30775359eb480454457623906acff5f4fb8d

  • SSDEEP

    6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      001d5796ff1df78cda48a9afeaeb04063049d0980f996bd14f311b19154f48c3

    • Size

      394KB

    • MD5

      b846744b50afe3e0a41c9b6fbdc21756

    • SHA1

      1b156477b9288228225d52773d034485ab56ff92

    • SHA256

      001d5796ff1df78cda48a9afeaeb04063049d0980f996bd14f311b19154f48c3

    • SHA512

      759402a73c98e5a05e8957ce72ea3a0745a0db427c606b95af1b9e8e401660c3469d134f6fb57677c63be0502e9e30775359eb480454457623906acff5f4fb8d

    • SSDEEP

      6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks