General

  • Target

    994967584502596ea0c374aab59e756f7932155628ec2d659ba2fe370c71780e

  • Size

    371KB

  • Sample

    241109-v1p4msyfpn

  • MD5

    d11b1f5a334d563be056d7701445da8e

  • SHA1

    5c040f85a62c13a4137ecdd763391d3411a1d211

  • SHA256

    994967584502596ea0c374aab59e756f7932155628ec2d659ba2fe370c71780e

  • SHA512

    5ce748949b29662d4702510023f5774be89b9f561ef92f3eb47a0d2350f535cff3190437fe1ff30d17b5390fa00abaf0a45aa63ec4ee9d237650622fbdbc2b3c

  • SSDEEP

    6144:OCXITG+urF+W2/cH8J6yr/bAxgPLrk1sx5b7ITsqXigaXwVfZ:OCXITDDWmx6BOj8O17R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      994967584502596ea0c374aab59e756f7932155628ec2d659ba2fe370c71780e

    • Size

      371KB

    • MD5

      d11b1f5a334d563be056d7701445da8e

    • SHA1

      5c040f85a62c13a4137ecdd763391d3411a1d211

    • SHA256

      994967584502596ea0c374aab59e756f7932155628ec2d659ba2fe370c71780e

    • SHA512

      5ce748949b29662d4702510023f5774be89b9f561ef92f3eb47a0d2350f535cff3190437fe1ff30d17b5390fa00abaf0a45aa63ec4ee9d237650622fbdbc2b3c

    • SSDEEP

      6144:OCXITG+urF+W2/cH8J6yr/bAxgPLrk1sx5b7ITsqXigaXwVfZ:OCXITDDWmx6BOj8O17R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks