General

  • Target

    3b89d758b0db6b76fc814362f1d3e87a656198afd58836c7bbbacd110c77b887

  • Size

    438KB

  • Sample

    241110-1nzp7swerd

  • MD5

    23d074ccafbd18c86cd963f1e89e4c75

  • SHA1

    eb7291c9633cea590df08a0c7f4e8feeab22e00f

  • SHA256

    3b89d758b0db6b76fc814362f1d3e87a656198afd58836c7bbbacd110c77b887

  • SHA512

    4a5e143008cf7ef42bb7fd042d2d9939c52a96a18bb1a409fa33ca8dbc9ac989013ca5e2f4c630d05fecfaf410dab5e6941bc5b2acb6f2c6f2f98c36c268cf4c

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      3b89d758b0db6b76fc814362f1d3e87a656198afd58836c7bbbacd110c77b887

    • Size

      438KB

    • MD5

      23d074ccafbd18c86cd963f1e89e4c75

    • SHA1

      eb7291c9633cea590df08a0c7f4e8feeab22e00f

    • SHA256

      3b89d758b0db6b76fc814362f1d3e87a656198afd58836c7bbbacd110c77b887

    • SHA512

      4a5e143008cf7ef42bb7fd042d2d9939c52a96a18bb1a409fa33ca8dbc9ac989013ca5e2f4c630d05fecfaf410dab5e6941bc5b2acb6f2c6f2f98c36c268cf4c

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks