General

  • Target

    e2b954b9d710d8cbd07cff93c5f4faa63a0c1f0d2768425e1b940ce582f14de7

  • Size

    423KB

  • Sample

    241109-wzje5syme1

  • MD5

    4663093ac8dd8353f3960a48eb01b4fd

  • SHA1

    d17da1aad9bf873807f9e320b03289bbc4a6ba6b

  • SHA256

    e2b954b9d710d8cbd07cff93c5f4faa63a0c1f0d2768425e1b940ce582f14de7

  • SHA512

    40e0c7265b12a38876e29d3701dce58e885187dcf35c22487b146320f7f78293582e4d91ab9c33ef8a6fb48395b509100bd66f8e107ea6db3170f50a1e8a0469

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      e2b954b9d710d8cbd07cff93c5f4faa63a0c1f0d2768425e1b940ce582f14de7

    • Size

      423KB

    • MD5

      4663093ac8dd8353f3960a48eb01b4fd

    • SHA1

      d17da1aad9bf873807f9e320b03289bbc4a6ba6b

    • SHA256

      e2b954b9d710d8cbd07cff93c5f4faa63a0c1f0d2768425e1b940ce582f14de7

    • SHA512

      40e0c7265b12a38876e29d3701dce58e885187dcf35c22487b146320f7f78293582e4d91ab9c33ef8a6fb48395b509100bd66f8e107ea6db3170f50a1e8a0469

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks