General

  • Target

    85f040225553dd4a01f0af53506af1cdad22082138db4f7ba00908c07dbfe1a2

  • Size

    293KB

  • Sample

    241110-b4m9nsxapb

  • MD5

    682c72e37332ceda810fcae22b466680

  • SHA1

    31549747d2ef6b70a4900089bba22b0db2743cdc

  • SHA256

    85f040225553dd4a01f0af53506af1cdad22082138db4f7ba00908c07dbfe1a2

  • SHA512

    f95fb0c98cd39735dc18dbe9d30a61a6ca6970a081b015329bc664e752c813ba696673326ca1486324e7873fad80a36df2d61f6f8313b3ad4f08b09c22f0c6c4

  • SSDEEP

    6144:st4ELrrMBa2I+QoWfyJqdkUV+Nuzbgwu:st4EHrMBf1RWfyJqdkNunn

Malware Config

Extracted

Family

redline

Botnet

ww

C2

45.9.20.168:46257

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      85f040225553dd4a01f0af53506af1cdad22082138db4f7ba00908c07dbfe1a2

    • Size

      293KB

    • MD5

      682c72e37332ceda810fcae22b466680

    • SHA1

      31549747d2ef6b70a4900089bba22b0db2743cdc

    • SHA256

      85f040225553dd4a01f0af53506af1cdad22082138db4f7ba00908c07dbfe1a2

    • SHA512

      f95fb0c98cd39735dc18dbe9d30a61a6ca6970a081b015329bc664e752c813ba696673326ca1486324e7873fad80a36df2d61f6f8313b3ad4f08b09c22f0c6c4

    • SSDEEP

      6144:st4ELrrMBa2I+QoWfyJqdkUV+Nuzbgwu:st4EHrMBf1RWfyJqdkNunn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks