General

  • Target

    595ded095d7df3f380be17460bddadc6b1c7621ba952d625fc4bbd7c297ebbca

  • Size

    427KB

  • Sample

    241110-f33eeszmgw

  • MD5

    bdb2a833fbd1ce294e44e92cf19e4d46

  • SHA1

    7b22f667aad9351ab82de9d845b79f7602ba8b41

  • SHA256

    595ded095d7df3f380be17460bddadc6b1c7621ba952d625fc4bbd7c297ebbca

  • SHA512

    4807cc2d76941dd54d7f59f21867214d8d5d465fb2ff2507638e5e78ac21c817d93559ae82eeab2cfe61c197990374f647b4ae35ba4270f470ec3069f1d1696a

  • SSDEEP

    12288:bI98VfhyNpDL3EwI6si3LbQMojbyZSnPsUx34:gx1EwNCyOP9S

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      595ded095d7df3f380be17460bddadc6b1c7621ba952d625fc4bbd7c297ebbca

    • Size

      427KB

    • MD5

      bdb2a833fbd1ce294e44e92cf19e4d46

    • SHA1

      7b22f667aad9351ab82de9d845b79f7602ba8b41

    • SHA256

      595ded095d7df3f380be17460bddadc6b1c7621ba952d625fc4bbd7c297ebbca

    • SHA512

      4807cc2d76941dd54d7f59f21867214d8d5d465fb2ff2507638e5e78ac21c817d93559ae82eeab2cfe61c197990374f647b4ae35ba4270f470ec3069f1d1696a

    • SSDEEP

      12288:bI98VfhyNpDL3EwI6si3LbQMojbyZSnPsUx34:gx1EwNCyOP9S

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks