General

  • Target

    5e9a390cc25733321c76e57c94bb47fd975791b4b73973907e33beb39445a77d

  • Size

    422KB

  • Sample

    241110-dewwma1lgj

  • MD5

    8fb6292bb7c9916c44b60aa45538240c

  • SHA1

    1d597f503d6da9bfe239a2591f65610455e39bd9

  • SHA256

    5e9a390cc25733321c76e57c94bb47fd975791b4b73973907e33beb39445a77d

  • SHA512

    870890a5f15693445b6f847e8fc98b58965b11ada036141e65c58999939828b2f2ac79e0d401052505929a2d692ef468150e0b1095760fad09a01bf2a1c93a17

  • SSDEEP

    12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      5e9a390cc25733321c76e57c94bb47fd975791b4b73973907e33beb39445a77d

    • Size

      422KB

    • MD5

      8fb6292bb7c9916c44b60aa45538240c

    • SHA1

      1d597f503d6da9bfe239a2591f65610455e39bd9

    • SHA256

      5e9a390cc25733321c76e57c94bb47fd975791b4b73973907e33beb39445a77d

    • SHA512

      870890a5f15693445b6f847e8fc98b58965b11ada036141e65c58999939828b2f2ac79e0d401052505929a2d692ef468150e0b1095760fad09a01bf2a1c93a17

    • SSDEEP

      12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks