General

  • Target

    4053e03d569915738498db22682680faa91987d0f678393e0e78a89abd7cfeb5

  • Size

    394KB

  • Sample

    241110-bpghkswfpc

  • MD5

    e4b3c78946586b591b3d358ea8559b9a

  • SHA1

    bb14ab87eb57b56663493c72b783dbfd6ec9605d

  • SHA256

    4053e03d569915738498db22682680faa91987d0f678393e0e78a89abd7cfeb5

  • SHA512

    98ca9fbcbdd287c7641b40ef3325bf8272317f9442c0efd7ae484c408eed36e8776f98993c24ec8ddb9343f8dc4c2bab9b6de00f573f719d39fa75e86bb48eae

  • SSDEEP

    6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      4053e03d569915738498db22682680faa91987d0f678393e0e78a89abd7cfeb5

    • Size

      394KB

    • MD5

      e4b3c78946586b591b3d358ea8559b9a

    • SHA1

      bb14ab87eb57b56663493c72b783dbfd6ec9605d

    • SHA256

      4053e03d569915738498db22682680faa91987d0f678393e0e78a89abd7cfeb5

    • SHA512

      98ca9fbcbdd287c7641b40ef3325bf8272317f9442c0efd7ae484c408eed36e8776f98993c24ec8ddb9343f8dc4c2bab9b6de00f573f719d39fa75e86bb48eae

    • SSDEEP

      6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks