General

  • Target

    e5b2995ab0b78cec36883963f99b69f1ff35d6182b22da34662b6fe851cfc36d

  • Size

    297KB

  • Sample

    241110-km2keatcjl

  • MD5

    0d31aa5278c3dc1777281da987cf184e

  • SHA1

    7ba041e466de4f556acc7ccff3752ce7e01ee310

  • SHA256

    e5b2995ab0b78cec36883963f99b69f1ff35d6182b22da34662b6fe851cfc36d

  • SHA512

    fd11b5883d50d9850ee3112622eef68756baa5260a03cbed5d400dcf8cdb1570194be557f73adc12a2c0229e65ddb4b0ac637fa122f84e85835e97158d3b2fa5

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      e5b2995ab0b78cec36883963f99b69f1ff35d6182b22da34662b6fe851cfc36d

    • Size

      297KB

    • MD5

      0d31aa5278c3dc1777281da987cf184e

    • SHA1

      7ba041e466de4f556acc7ccff3752ce7e01ee310

    • SHA256

      e5b2995ab0b78cec36883963f99b69f1ff35d6182b22da34662b6fe851cfc36d

    • SHA512

      fd11b5883d50d9850ee3112622eef68756baa5260a03cbed5d400dcf8cdb1570194be557f73adc12a2c0229e65ddb4b0ac637fa122f84e85835e97158d3b2fa5

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks