General

  • Target

    1b91d5df5216f0652031423c93e8e68dad9c69fb105463a5a6f2ba0e08be1b09

  • Size

    423KB

  • Sample

    241110-ed1nvsyhrh

  • MD5

    2109827b27efa26810f6bd5ca5034af7

  • SHA1

    4a9808a8151f3c7f7aa9ece85d60029ffdfc6c92

  • SHA256

    1b91d5df5216f0652031423c93e8e68dad9c69fb105463a5a6f2ba0e08be1b09

  • SHA512

    a764057349645d9bbfaaf334f9bddd3e4f5e12f9994d0583e1201f88a8c3925e4b98f054a31ed6fd0ff31000a354199707891650d25e3807dba4e0220e5897c9

  • SSDEEP

    6144:cMui5ObVmy+0LExccD4HOCL+qzPI1vCyuKkYi82Jzj6efYPV0p:GrLExjiOCyqzPI1vCyuKkBJzjL

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      1b91d5df5216f0652031423c93e8e68dad9c69fb105463a5a6f2ba0e08be1b09

    • Size

      423KB

    • MD5

      2109827b27efa26810f6bd5ca5034af7

    • SHA1

      4a9808a8151f3c7f7aa9ece85d60029ffdfc6c92

    • SHA256

      1b91d5df5216f0652031423c93e8e68dad9c69fb105463a5a6f2ba0e08be1b09

    • SHA512

      a764057349645d9bbfaaf334f9bddd3e4f5e12f9994d0583e1201f88a8c3925e4b98f054a31ed6fd0ff31000a354199707891650d25e3807dba4e0220e5897c9

    • SSDEEP

      6144:cMui5ObVmy+0LExccD4HOCL+qzPI1vCyuKkYi82Jzj6efYPV0p:GrLExjiOCyqzPI1vCyuKkBJzjL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks