General

  • Target

    e1da50d9639204771006f9fbd3bd16572cfefdd133297693c964e641b9213a43

  • Size

    363KB

  • Sample

    241109-x4lazazhra

  • MD5

    7cab7a0e29bbadc953ab4507df35d3e6

  • SHA1

    5b685ceb559a18dce6d3a7ce14a12eb5d6273bd8

  • SHA256

    e1da50d9639204771006f9fbd3bd16572cfefdd133297693c964e641b9213a43

  • SHA512

    cafbd8bc8eb955a9bf88c8ebecd5b5d48b076a5240f27d3d2a2ae1a9738f1d4852a929c732b27fdfecfb91a7dbc024b9c96144a4c07ed8400ec0481546a32759

  • SSDEEP

    6144:1YEeTfqmR5IenO8wIV+i05ZhOu2IcW/RZ6cewj0ItranHeIprKa2Hk+933jqxo5I:5oR+T8w0+ilWcW5Z6cewj0ItranHeIpn

Malware Config

Extracted

Family

redline

C2

45.154.98.133:9552

Attributes
  • auth_value

    710a3a4ccb69dd3f9d1a21b017114be9

Targets

    • Target

      e1da50d9639204771006f9fbd3bd16572cfefdd133297693c964e641b9213a43

    • Size

      363KB

    • MD5

      7cab7a0e29bbadc953ab4507df35d3e6

    • SHA1

      5b685ceb559a18dce6d3a7ce14a12eb5d6273bd8

    • SHA256

      e1da50d9639204771006f9fbd3bd16572cfefdd133297693c964e641b9213a43

    • SHA512

      cafbd8bc8eb955a9bf88c8ebecd5b5d48b076a5240f27d3d2a2ae1a9738f1d4852a929c732b27fdfecfb91a7dbc024b9c96144a4c07ed8400ec0481546a32759

    • SSDEEP

      6144:1YEeTfqmR5IenO8wIV+i05ZhOu2IcW/RZ6cewj0ItranHeIprKa2Hk+933jqxo5I:5oR+T8w0+ilWcW5Z6cewj0ItranHeIpn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks