General

  • Target

    73594b6db8c4701a9adccd6d7d50ddc4100408c429a8c4c92940244fef5d531a

  • Size

    297KB

  • Sample

    241110-k4sntstjf1

  • MD5

    8422b1ddb97d08ce8b3d9d9a49bbe626

  • SHA1

    7f51169948dab41092ea00a5f0e598c88247bda4

  • SHA256

    73594b6db8c4701a9adccd6d7d50ddc4100408c429a8c4c92940244fef5d531a

  • SHA512

    a52d1e597cbdeaaf14fad838642a67296163baf620d10242d6020c8b95053b223dea6cd5806172233e96068f989d6b009fce81f5102bfb0fb527540a1a47e158

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      73594b6db8c4701a9adccd6d7d50ddc4100408c429a8c4c92940244fef5d531a

    • Size

      297KB

    • MD5

      8422b1ddb97d08ce8b3d9d9a49bbe626

    • SHA1

      7f51169948dab41092ea00a5f0e598c88247bda4

    • SHA256

      73594b6db8c4701a9adccd6d7d50ddc4100408c429a8c4c92940244fef5d531a

    • SHA512

      a52d1e597cbdeaaf14fad838642a67296163baf620d10242d6020c8b95053b223dea6cd5806172233e96068f989d6b009fce81f5102bfb0fb527540a1a47e158

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks