General

  • Target

    2d4fd89ce481feb980aff0460772174442d6bfbd12c89880b75e83b369d42281

  • Size

    298KB

  • Sample

    241110-egmamsygpr

  • MD5

    748e0d3c9c939a32c34c2c16f68aafab

  • SHA1

    7720d2f46a27bb321c9bff090862d8fdcb8510c4

  • SHA256

    2d4fd89ce481feb980aff0460772174442d6bfbd12c89880b75e83b369d42281

  • SHA512

    53966bb96e3a709e5e63dcf3f85bf5ca1422f1814799c0a1252090fad9f49fa5ed446534154b7b6e89cd85ed606c0c3f70ac390bdbb3d0919a8e10e5558d6de1

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2d4fd89ce481feb980aff0460772174442d6bfbd12c89880b75e83b369d42281

    • Size

      298KB

    • MD5

      748e0d3c9c939a32c34c2c16f68aafab

    • SHA1

      7720d2f46a27bb321c9bff090862d8fdcb8510c4

    • SHA256

      2d4fd89ce481feb980aff0460772174442d6bfbd12c89880b75e83b369d42281

    • SHA512

      53966bb96e3a709e5e63dcf3f85bf5ca1422f1814799c0a1252090fad9f49fa5ed446534154b7b6e89cd85ed606c0c3f70ac390bdbb3d0919a8e10e5558d6de1

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks