General

  • Target

    5c3ff24dc15877fc7cef5c2447d9fb4531039a6b07c25f2748c2bac25ac4891a

  • Size

    298KB

  • Sample

    241110-dvfvcayekg

  • MD5

    bdc3b1507781174fdb2f544088c1ba31

  • SHA1

    0661b158ad957231943323905334a1f437c3b165

  • SHA256

    5c3ff24dc15877fc7cef5c2447d9fb4531039a6b07c25f2748c2bac25ac4891a

  • SHA512

    d59cec910673725646ad7831d6970c9dfecc943c9b935f6f38c87a5f92ae799cb86da9c6cdc12b93f8b0e0a200f24d35204ee37af11f27a3c6562e45d9f96d0c

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      5c3ff24dc15877fc7cef5c2447d9fb4531039a6b07c25f2748c2bac25ac4891a

    • Size

      298KB

    • MD5

      bdc3b1507781174fdb2f544088c1ba31

    • SHA1

      0661b158ad957231943323905334a1f437c3b165

    • SHA256

      5c3ff24dc15877fc7cef5c2447d9fb4531039a6b07c25f2748c2bac25ac4891a

    • SHA512

      d59cec910673725646ad7831d6970c9dfecc943c9b935f6f38c87a5f92ae799cb86da9c6cdc12b93f8b0e0a200f24d35204ee37af11f27a3c6562e45d9f96d0c

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks