General

  • Target

    25461b9d2bacbf36d0d2acde027216d8b4d725923b5f45339df8ed918ad42fd6

  • Size

    438KB

  • Sample

    241109-qzlmlsvhmj

  • MD5

    e8ce8aa819838dee17ace0545636b210

  • SHA1

    a8c7d488e86aaf6d483029f79e8e47b3d140cf36

  • SHA256

    25461b9d2bacbf36d0d2acde027216d8b4d725923b5f45339df8ed918ad42fd6

  • SHA512

    a31f5bc4813a1035d5a667e934246b73de6c2499d78a1804ee814e54b95ff6297b423a3cb0a000802e10c4e1773659ca9429b5c494ea944670b42f6b40eea0f3

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      25461b9d2bacbf36d0d2acde027216d8b4d725923b5f45339df8ed918ad42fd6

    • Size

      438KB

    • MD5

      e8ce8aa819838dee17ace0545636b210

    • SHA1

      a8c7d488e86aaf6d483029f79e8e47b3d140cf36

    • SHA256

      25461b9d2bacbf36d0d2acde027216d8b4d725923b5f45339df8ed918ad42fd6

    • SHA512

      a31f5bc4813a1035d5a667e934246b73de6c2499d78a1804ee814e54b95ff6297b423a3cb0a000802e10c4e1773659ca9429b5c494ea944670b42f6b40eea0f3

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks