General

  • Target

    4fd12ddfce329ccf6b1a9bbb5ab0a92d068c4c947edb08d790e5ca6eb61d1db7

  • Size

    383KB

  • Sample

    241110-ksqp4asqgw

  • MD5

    4039c8015625f6e6083c12b60395f324

  • SHA1

    1f5d67f7799aef130a45266e5b31b86791dd0097

  • SHA256

    4fd12ddfce329ccf6b1a9bbb5ab0a92d068c4c947edb08d790e5ca6eb61d1db7

  • SHA512

    20a65829381028b2b3c0205c00df30302da7d828ad372bbd975ef3e2846b905047f1ee45ba089d1e14a73b01094eca5065b267419684aa8c351fc41e4ab899b6

  • SSDEEP

    6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      4fd12ddfce329ccf6b1a9bbb5ab0a92d068c4c947edb08d790e5ca6eb61d1db7

    • Size

      383KB

    • MD5

      4039c8015625f6e6083c12b60395f324

    • SHA1

      1f5d67f7799aef130a45266e5b31b86791dd0097

    • SHA256

      4fd12ddfce329ccf6b1a9bbb5ab0a92d068c4c947edb08d790e5ca6eb61d1db7

    • SHA512

      20a65829381028b2b3c0205c00df30302da7d828ad372bbd975ef3e2846b905047f1ee45ba089d1e14a73b01094eca5065b267419684aa8c351fc41e4ab899b6

    • SSDEEP

      6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks