General

  • Target

    58c5d36ccc7d60140bc97696a45722bee34e52188eee898c3fe41098ffa3e9f6

  • Size

    373KB

  • Sample

    241110-kx68mswrep

  • MD5

    9d26edefe08d8d62a3b31b947e3f9969

  • SHA1

    e61e361bdaae09e5b9739dcd0cdb0db231f12696

  • SHA256

    58c5d36ccc7d60140bc97696a45722bee34e52188eee898c3fe41098ffa3e9f6

  • SHA512

    164f7dfe5f48bf8ed453d1dd4cfc62d52103da669ee3cfe5854e48934bd4acac7f3439da1689c2d6f8e44af9829e1ebb10381dfb3ba144b5aedf3d141565ff79

  • SSDEEP

    6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      58c5d36ccc7d60140bc97696a45722bee34e52188eee898c3fe41098ffa3e9f6

    • Size

      373KB

    • MD5

      9d26edefe08d8d62a3b31b947e3f9969

    • SHA1

      e61e361bdaae09e5b9739dcd0cdb0db231f12696

    • SHA256

      58c5d36ccc7d60140bc97696a45722bee34e52188eee898c3fe41098ffa3e9f6

    • SHA512

      164f7dfe5f48bf8ed453d1dd4cfc62d52103da669ee3cfe5854e48934bd4acac7f3439da1689c2d6f8e44af9829e1ebb10381dfb3ba144b5aedf3d141565ff79

    • SSDEEP

      6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks