General

  • Target

    bb1dfb8f3489b2d82370b9bb33f4ae529e8e23ced5d0e3bd69ad49a98c8aee6a

  • Size

    371KB

  • Sample

    241110-e7l3kazfkf

  • MD5

    22079d5b5716e7b202254b21655354a2

  • SHA1

    5d91fd3d98aaf38931beda935d88c45d5bb9c4f5

  • SHA256

    bb1dfb8f3489b2d82370b9bb33f4ae529e8e23ced5d0e3bd69ad49a98c8aee6a

  • SHA512

    fae2610750eee118528ff8b20c19893fa263bd0f50833c4b0bc178a417c32ecbc3504b4b35ba1cffb6caaad84f95e94fe59f80d6a0409bdfc942a3d82eeec8bd

  • SSDEEP

    6144:K5T6cP+DC7WJrK3tg4LobitExnGRZyodb7ITsqXigaXwVfh:K5T6cEKWJMW7GR5h7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      bb1dfb8f3489b2d82370b9bb33f4ae529e8e23ced5d0e3bd69ad49a98c8aee6a

    • Size

      371KB

    • MD5

      22079d5b5716e7b202254b21655354a2

    • SHA1

      5d91fd3d98aaf38931beda935d88c45d5bb9c4f5

    • SHA256

      bb1dfb8f3489b2d82370b9bb33f4ae529e8e23ced5d0e3bd69ad49a98c8aee6a

    • SHA512

      fae2610750eee118528ff8b20c19893fa263bd0f50833c4b0bc178a417c32ecbc3504b4b35ba1cffb6caaad84f95e94fe59f80d6a0409bdfc942a3d82eeec8bd

    • SSDEEP

      6144:K5T6cP+DC7WJrK3tg4LobitExnGRZyodb7ITsqXigaXwVfh:K5T6cEKWJMW7GR5h7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks