General

  • Target

    851580a6058222d5b7120aa06fcbc1ba6b01795942b706cdfc80dd86729eca89

  • Size

    297KB

  • Sample

    241109-t47mesyarr

  • MD5

    018301a94cd628d11e40ea534cc3a61a

  • SHA1

    265cae6106ab601f49158e9b6d66ec4df865f54b

  • SHA256

    851580a6058222d5b7120aa06fcbc1ba6b01795942b706cdfc80dd86729eca89

  • SHA512

    6e8fb40384af98f17f976ec757dbafb5761c4a74f105a1c184bfc5ca499c9a190dae331cc84421bb9b98c80f0c719cd0659a8a9b134320e750945a32c2857764

  • SSDEEP

    6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      851580a6058222d5b7120aa06fcbc1ba6b01795942b706cdfc80dd86729eca89

    • Size

      297KB

    • MD5

      018301a94cd628d11e40ea534cc3a61a

    • SHA1

      265cae6106ab601f49158e9b6d66ec4df865f54b

    • SHA256

      851580a6058222d5b7120aa06fcbc1ba6b01795942b706cdfc80dd86729eca89

    • SHA512

      6e8fb40384af98f17f976ec757dbafb5761c4a74f105a1c184bfc5ca499c9a190dae331cc84421bb9b98c80f0c719cd0659a8a9b134320e750945a32c2857764

    • SSDEEP

      6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks