General

  • Target

    91f6557843c1775293465071498e738103bc2a6194ee0f0b2c5b79ab3709c3dc

  • Size

    423KB

  • Sample

    241110-em8e3aslhl

  • MD5

    516e6bad3d2624a34498c1fe50655c7a

  • SHA1

    2ec9fbe162cbea3907d2d456cd2d38ba3efbf383

  • SHA256

    91f6557843c1775293465071498e738103bc2a6194ee0f0b2c5b79ab3709c3dc

  • SHA512

    e085a1967f5f1c40c59f92dd07545628b64a7b073a64c991c0303c75d23fb0fea31c926e67f945f65df01c59ec5db4a9ab92f8c9a0119cbcc4c1e41a1181911c

  • SSDEEP

    6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      91f6557843c1775293465071498e738103bc2a6194ee0f0b2c5b79ab3709c3dc

    • Size

      423KB

    • MD5

      516e6bad3d2624a34498c1fe50655c7a

    • SHA1

      2ec9fbe162cbea3907d2d456cd2d38ba3efbf383

    • SHA256

      91f6557843c1775293465071498e738103bc2a6194ee0f0b2c5b79ab3709c3dc

    • SHA512

      e085a1967f5f1c40c59f92dd07545628b64a7b073a64c991c0303c75d23fb0fea31c926e67f945f65df01c59ec5db4a9ab92f8c9a0119cbcc4c1e41a1181911c

    • SSDEEP

      6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks