General

  • Target

    d95413e76d010254dabd0971c839929f4bf3d118e9de0832a02870d2982e87b4

  • Size

    297KB

  • Sample

    241109-t3alasxjht

  • MD5

    ad09297a3b49c970172fb40afa9a3278

  • SHA1

    58aec02a1209e9d1b35e6986b7ab940f14e97731

  • SHA256

    d95413e76d010254dabd0971c839929f4bf3d118e9de0832a02870d2982e87b4

  • SHA512

    5dccd2f4cba5894242d06a32394e19db0d87eb4f50017c48f8126ca2ce4c19896a1645c14952b1c2747f0c9d336c6d2d173e6b18329a158fbc71e2737f47ba09

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d95413e76d010254dabd0971c839929f4bf3d118e9de0832a02870d2982e87b4

    • Size

      297KB

    • MD5

      ad09297a3b49c970172fb40afa9a3278

    • SHA1

      58aec02a1209e9d1b35e6986b7ab940f14e97731

    • SHA256

      d95413e76d010254dabd0971c839929f4bf3d118e9de0832a02870d2982e87b4

    • SHA512

      5dccd2f4cba5894242d06a32394e19db0d87eb4f50017c48f8126ca2ce4c19896a1645c14952b1c2747f0c9d336c6d2d173e6b18329a158fbc71e2737f47ba09

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks