General

  • Target

    917a2c03f3df7c786ba70806360ff2a6ef08758f09ab600d261967b31f4b8e58

  • Size

    297KB

  • Sample

    241110-d54zxsyenq

  • MD5

    d731504345616246416b64c76345137a

  • SHA1

    542c65c33d3fa99ba368b33af8a37fe623658f24

  • SHA256

    917a2c03f3df7c786ba70806360ff2a6ef08758f09ab600d261967b31f4b8e58

  • SHA512

    73af0a703bb2b27d7eda93fbaeb9000e466389707bd3ebcec44e0e977e7212364d80b0b2cf00f9ce79d8fdd993b3a237ad639aabc05f6bbdf9d22f457a0ed707

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      917a2c03f3df7c786ba70806360ff2a6ef08758f09ab600d261967b31f4b8e58

    • Size

      297KB

    • MD5

      d731504345616246416b64c76345137a

    • SHA1

      542c65c33d3fa99ba368b33af8a37fe623658f24

    • SHA256

      917a2c03f3df7c786ba70806360ff2a6ef08758f09ab600d261967b31f4b8e58

    • SHA512

      73af0a703bb2b27d7eda93fbaeb9000e466389707bd3ebcec44e0e977e7212364d80b0b2cf00f9ce79d8fdd993b3a237ad639aabc05f6bbdf9d22f457a0ed707

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks