General

  • Target

    373c38256679b12854ca9f27b7ebd9a337388defff919670b8ba29d1538b6ff0

  • Size

    298KB

  • Sample

    241109-p3kdaaxnbp

  • MD5

    d54b8851d98e89292d2ea00bd668a907

  • SHA1

    a9816f108b9ce456cda12eaa09c951c1da12a28f

  • SHA256

    373c38256679b12854ca9f27b7ebd9a337388defff919670b8ba29d1538b6ff0

  • SHA512

    e045e7fb8055c88508d2c6e1737f34008fbe9bea5bf9d856f6c741668199c8e9bfc5b58bf0fe7298af4813af143131adafb7dc5b5a77101fa847f7da5dd1d9ab

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      373c38256679b12854ca9f27b7ebd9a337388defff919670b8ba29d1538b6ff0

    • Size

      298KB

    • MD5

      d54b8851d98e89292d2ea00bd668a907

    • SHA1

      a9816f108b9ce456cda12eaa09c951c1da12a28f

    • SHA256

      373c38256679b12854ca9f27b7ebd9a337388defff919670b8ba29d1538b6ff0

    • SHA512

      e045e7fb8055c88508d2c6e1737f34008fbe9bea5bf9d856f6c741668199c8e9bfc5b58bf0fe7298af4813af143131adafb7dc5b5a77101fa847f7da5dd1d9ab

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks