General

  • Target

    17ccd26af289bd75f94686737d91ae36f997612065d9599c84ae3c5881880023

  • Size

    438KB

  • Sample

    241110-lxgtesxnfn

  • MD5

    5dfd5580e30ef563fabf2e024de90e42

  • SHA1

    1d6bfc9ee4d97fe0766e822c5c077919d9602c0d

  • SHA256

    17ccd26af289bd75f94686737d91ae36f997612065d9599c84ae3c5881880023

  • SHA512

    9c93307b80aab99592cfb4b850abefe1a0bbe23ef4706b82c7a430879037cee0fa249b32d8dcec7d33a66a88952ca84007514c0d4fb32f41bd25367911fe186a

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      17ccd26af289bd75f94686737d91ae36f997612065d9599c84ae3c5881880023

    • Size

      438KB

    • MD5

      5dfd5580e30ef563fabf2e024de90e42

    • SHA1

      1d6bfc9ee4d97fe0766e822c5c077919d9602c0d

    • SHA256

      17ccd26af289bd75f94686737d91ae36f997612065d9599c84ae3c5881880023

    • SHA512

      9c93307b80aab99592cfb4b850abefe1a0bbe23ef4706b82c7a430879037cee0fa249b32d8dcec7d33a66a88952ca84007514c0d4fb32f41bd25367911fe186a

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks