General

  • Target

    015b0bf521229afa42429520451f7641cedc6df489e4d2b8bcefe9acf524c11e

  • Size

    438KB

  • Sample

    241110-d6f99ayjht

  • MD5

    398477410841f7d03ee4bc253ae3383b

  • SHA1

    4fbe0517f009ff5e54ed994100c92952a315fdb3

  • SHA256

    015b0bf521229afa42429520451f7641cedc6df489e4d2b8bcefe9acf524c11e

  • SHA512

    5002d51287e3bc412a695d5621882b2477a91f2e0bf597d1f262d22e4a162247386b88172972cfaef306e65160e2a386d024e7742af268c8b339c0ec9a705a83

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      015b0bf521229afa42429520451f7641cedc6df489e4d2b8bcefe9acf524c11e

    • Size

      438KB

    • MD5

      398477410841f7d03ee4bc253ae3383b

    • SHA1

      4fbe0517f009ff5e54ed994100c92952a315fdb3

    • SHA256

      015b0bf521229afa42429520451f7641cedc6df489e4d2b8bcefe9acf524c11e

    • SHA512

      5002d51287e3bc412a695d5621882b2477a91f2e0bf597d1f262d22e4a162247386b88172972cfaef306e65160e2a386d024e7742af268c8b339c0ec9a705a83

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks