General

  • Target

    bb944ed86269349dd5d6116d4265bc7e9426b8a82b840f251d8687812a2a9230

  • Size

    371KB

  • Sample

    241109-s3715axdnq

  • MD5

    432a6733a6f372e3af23f182c4fe92c4

  • SHA1

    3dfb273da42fc837008edfe723dd182a95e62975

  • SHA256

    bb944ed86269349dd5d6116d4265bc7e9426b8a82b840f251d8687812a2a9230

  • SHA512

    707bbf14b63f27459f93c16c8d82269eeef3103a38cd0eedff96f246f499b1eb3ffcbff936071669cef7d36611c42c16de22429c41579f99dfdec79c8b130ddb

  • SSDEEP

    6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      bb944ed86269349dd5d6116d4265bc7e9426b8a82b840f251d8687812a2a9230

    • Size

      371KB

    • MD5

      432a6733a6f372e3af23f182c4fe92c4

    • SHA1

      3dfb273da42fc837008edfe723dd182a95e62975

    • SHA256

      bb944ed86269349dd5d6116d4265bc7e9426b8a82b840f251d8687812a2a9230

    • SHA512

      707bbf14b63f27459f93c16c8d82269eeef3103a38cd0eedff96f246f499b1eb3ffcbff936071669cef7d36611c42c16de22429c41579f99dfdec79c8b130ddb

    • SSDEEP

      6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks