General

  • Target

    267d5e0fb9b2e3c409129bacd3a017d16feed4b78a35ba60b5caa0c96497e507

  • Size

    298KB

  • Sample

    241110-a1rbgswbpe

  • MD5

    7510d4fa7b87ea9bfbbc76e1dd411438

  • SHA1

    4327b871f8e047dd139ed06165a066bb99c06bf8

  • SHA256

    267d5e0fb9b2e3c409129bacd3a017d16feed4b78a35ba60b5caa0c96497e507

  • SHA512

    cd21dc65b7bf2b2de332ffd05a5e63e47c0ea714fa466021ceddc2f694a0cf97d9fa26023c94d4b35666efe64f7a1ced0d92fe571672c15d0a0275f0f67fd669

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      267d5e0fb9b2e3c409129bacd3a017d16feed4b78a35ba60b5caa0c96497e507

    • Size

      298KB

    • MD5

      7510d4fa7b87ea9bfbbc76e1dd411438

    • SHA1

      4327b871f8e047dd139ed06165a066bb99c06bf8

    • SHA256

      267d5e0fb9b2e3c409129bacd3a017d16feed4b78a35ba60b5caa0c96497e507

    • SHA512

      cd21dc65b7bf2b2de332ffd05a5e63e47c0ea714fa466021ceddc2f694a0cf97d9fa26023c94d4b35666efe64f7a1ced0d92fe571672c15d0a0275f0f67fd669

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks