General

  • Target

    14993e222c73d342e07d2f336fb6659ab3f0557042e3e0252690c97e80e2b556

  • Size

    423KB

  • Sample

    241110-lk12jatgnn

  • MD5

    97e1967e30a76a4f6fa905d8f5dbc85f

  • SHA1

    6b7d665168aca08fb47d25ecf358c24450a119c9

  • SHA256

    14993e222c73d342e07d2f336fb6659ab3f0557042e3e0252690c97e80e2b556

  • SHA512

    05e56143740fcd52be6c39db2e90cf137b8fe8fbb0f81e1d7ae367e39ac2b03d8bfedafa57d6996f3813864f63d72d846060561920cc525d4b71392e20c40f66

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      14993e222c73d342e07d2f336fb6659ab3f0557042e3e0252690c97e80e2b556

    • Size

      423KB

    • MD5

      97e1967e30a76a4f6fa905d8f5dbc85f

    • SHA1

      6b7d665168aca08fb47d25ecf358c24450a119c9

    • SHA256

      14993e222c73d342e07d2f336fb6659ab3f0557042e3e0252690c97e80e2b556

    • SHA512

      05e56143740fcd52be6c39db2e90cf137b8fe8fbb0f81e1d7ae367e39ac2b03d8bfedafa57d6996f3813864f63d72d846060561920cc525d4b71392e20c40f66

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks