General

  • Target

    d9d4804923a873424e3ae14483112098b173980e6b206139b95f3a00799c4785

  • Size

    438KB

  • Sample

    241110-gvya6s1dnl

  • MD5

    0b3fb96965cf1a19505f9366ed4bcbfa

  • SHA1

    ff6b98a7164c51d6b178b38e84df4080764a3b81

  • SHA256

    d9d4804923a873424e3ae14483112098b173980e6b206139b95f3a00799c4785

  • SHA512

    739d1e5aadffbdfecb4fdb9c8fb4a4031beaef49a08df593b7d5e4ef485c51408cb8ac4d9af3151904c94c759f6d836e3c19fbe771a8726df4578af59feaa575

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d9d4804923a873424e3ae14483112098b173980e6b206139b95f3a00799c4785

    • Size

      438KB

    • MD5

      0b3fb96965cf1a19505f9366ed4bcbfa

    • SHA1

      ff6b98a7164c51d6b178b38e84df4080764a3b81

    • SHA256

      d9d4804923a873424e3ae14483112098b173980e6b206139b95f3a00799c4785

    • SHA512

      739d1e5aadffbdfecb4fdb9c8fb4a4031beaef49a08df593b7d5e4ef485c51408cb8ac4d9af3151904c94c759f6d836e3c19fbe771a8726df4578af59feaa575

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks