General

  • Target

    c4f644c2245837733e909c7a5a9680ea1dd279ea8ce16bddcf324135a01948a1

  • Size

    438KB

  • Sample

    241110-g197xs1jdx

  • MD5

    2579c601a90bba661e280aa28d45e47d

  • SHA1

    a78f289023dab9890f816d97c32d6e0f90415280

  • SHA256

    c4f644c2245837733e909c7a5a9680ea1dd279ea8ce16bddcf324135a01948a1

  • SHA512

    5de90503e23a77d7596fd66cfa677932ba03d9fa06fa18b920a305cb6c77d019e6d48d82e06b259baea14801769e683048c2971fc8535e8f8e243580fdb80015

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      c4f644c2245837733e909c7a5a9680ea1dd279ea8ce16bddcf324135a01948a1

    • Size

      438KB

    • MD5

      2579c601a90bba661e280aa28d45e47d

    • SHA1

      a78f289023dab9890f816d97c32d6e0f90415280

    • SHA256

      c4f644c2245837733e909c7a5a9680ea1dd279ea8ce16bddcf324135a01948a1

    • SHA512

      5de90503e23a77d7596fd66cfa677932ba03d9fa06fa18b920a305cb6c77d019e6d48d82e06b259baea14801769e683048c2971fc8535e8f8e243580fdb80015

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks