General

  • Target

    258b2a0e4381ffa2ba35f2b8a2b3924107bd3c47f37caabe6fc8cd74696849cb

  • Size

    438KB

  • Sample

    241110-3r5fzaxfjl

  • MD5

    5f57a54e4049f41ed618db07f8c53de8

  • SHA1

    b04f49260f43b81b11f48bc19e79fd83a43a7ef3

  • SHA256

    258b2a0e4381ffa2ba35f2b8a2b3924107bd3c47f37caabe6fc8cd74696849cb

  • SHA512

    c10849c708c0fcf79e492c15ecd2cee16ed00cee3e59230d3a662095cae03be584d9d1a11a7ec8daab73ef4826993855a706c6d8e036fe9ef8fef8ed535d6e44

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      258b2a0e4381ffa2ba35f2b8a2b3924107bd3c47f37caabe6fc8cd74696849cb

    • Size

      438KB

    • MD5

      5f57a54e4049f41ed618db07f8c53de8

    • SHA1

      b04f49260f43b81b11f48bc19e79fd83a43a7ef3

    • SHA256

      258b2a0e4381ffa2ba35f2b8a2b3924107bd3c47f37caabe6fc8cd74696849cb

    • SHA512

      c10849c708c0fcf79e492c15ecd2cee16ed00cee3e59230d3a662095cae03be584d9d1a11a7ec8daab73ef4826993855a706c6d8e036fe9ef8fef8ed535d6e44

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks