General

  • Target

    11efce0526086ee25ce47ea24947e94e9b74af9102c5e42037711c7c628a50d4

  • Size

    428KB

  • Sample

    241109-najevatbpm

  • MD5

    f3550cda3d3c4923e3a5a6d250f370ae

  • SHA1

    e21949208b900d9942a6342f1318d25854eb7d92

  • SHA256

    11efce0526086ee25ce47ea24947e94e9b74af9102c5e42037711c7c628a50d4

  • SHA512

    4df7dfee9df6c26e5de97e2a07026fce7f06987bda539e48bd1047fcbc0a2ead903088adf62844b1e3329eb506e43a226550ec8007cdfc2a821b9bfda01c66f2

  • SSDEEP

    6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      11efce0526086ee25ce47ea24947e94e9b74af9102c5e42037711c7c628a50d4

    • Size

      428KB

    • MD5

      f3550cda3d3c4923e3a5a6d250f370ae

    • SHA1

      e21949208b900d9942a6342f1318d25854eb7d92

    • SHA256

      11efce0526086ee25ce47ea24947e94e9b74af9102c5e42037711c7c628a50d4

    • SHA512

      4df7dfee9df6c26e5de97e2a07026fce7f06987bda539e48bd1047fcbc0a2ead903088adf62844b1e3329eb506e43a226550ec8007cdfc2a821b9bfda01c66f2

    • SSDEEP

      6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks