General

  • Target

    2e4e5897b146ea594da03ffe2e0cac983996d88b0d387fe77406596bedd1741d

  • Size

    442KB

  • Sample

    241110-3ve1gsyajb

  • MD5

    f1661148eb4f981d8e8055ac2f7bafb8

  • SHA1

    e6be3b9481db9a220e9ec4ec9c4ff710e7fcf343

  • SHA256

    2e4e5897b146ea594da03ffe2e0cac983996d88b0d387fe77406596bedd1741d

  • SHA512

    c4625eec2c8e5f391a82be26b5dc72d2312251fe644927dccce81c2b46b6dbb8980af1e40e982a3ea7472805996491194d707b72f571a955fa26e27bdc7acc89

  • SSDEEP

    6144:C5StM2qgaNzvk0C6bQ03Ol1cZCLaetZgAG79FjZzVdS+VRIqgzPoxORIbOf:YKU603ORepAG79FjZzbS+XIqgMF

Malware Config

Extracted

Family

redline

Botnet

ww

C2

45.9.20.168:46257

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      2e4e5897b146ea594da03ffe2e0cac983996d88b0d387fe77406596bedd1741d

    • Size

      442KB

    • MD5

      f1661148eb4f981d8e8055ac2f7bafb8

    • SHA1

      e6be3b9481db9a220e9ec4ec9c4ff710e7fcf343

    • SHA256

      2e4e5897b146ea594da03ffe2e0cac983996d88b0d387fe77406596bedd1741d

    • SHA512

      c4625eec2c8e5f391a82be26b5dc72d2312251fe644927dccce81c2b46b6dbb8980af1e40e982a3ea7472805996491194d707b72f571a955fa26e27bdc7acc89

    • SSDEEP

      6144:C5StM2qgaNzvk0C6bQ03Ol1cZCLaetZgAG79FjZzVdS+VRIqgzPoxORIbOf:YKU603ORepAG79FjZzbS+XIqgMF

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks