General

  • Target

    3ddf258eb54254ba296eb657dbf66c30a8fe5935517f13d2735bd5c3b5e9ed42

  • Size

    371KB

  • Sample

    241110-gxwv5atrgn

  • MD5

    50479998f7c6671b70d69350e2a539a7

  • SHA1

    884fe105e886c3bff94356d90b3457edc6dc8aec

  • SHA256

    3ddf258eb54254ba296eb657dbf66c30a8fe5935517f13d2735bd5c3b5e9ed42

  • SHA512

    02ef8d89eac814c7ab9d32429af971dfb2351bc7a641de6592e26f0643631413fc0ef1983eb6d1aa1ca2c7cb8a6fbb758179665d0ee9d50385a4e68b76d97e16

  • SSDEEP

    6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      3ddf258eb54254ba296eb657dbf66c30a8fe5935517f13d2735bd5c3b5e9ed42

    • Size

      371KB

    • MD5

      50479998f7c6671b70d69350e2a539a7

    • SHA1

      884fe105e886c3bff94356d90b3457edc6dc8aec

    • SHA256

      3ddf258eb54254ba296eb657dbf66c30a8fe5935517f13d2735bd5c3b5e9ed42

    • SHA512

      02ef8d89eac814c7ab9d32429af971dfb2351bc7a641de6592e26f0643631413fc0ef1983eb6d1aa1ca2c7cb8a6fbb758179665d0ee9d50385a4e68b76d97e16

    • SSDEEP

      6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks