General

  • Target

    da80bd9f4b21617e9a5205650265dd4e978225afcfd1d409970217c81d74ea93

  • Size

    423KB

  • Sample

    241110-pkklbszlck

  • MD5

    1f033815c46ee1472050e0288511827d

  • SHA1

    04d2f7b95b4e1f751de59fccbe4cbb70968d6ce6

  • SHA256

    da80bd9f4b21617e9a5205650265dd4e978225afcfd1d409970217c81d74ea93

  • SHA512

    407274ab4da1f97cc82c6614972658db1df28b6433972ceba020b1c9aa7fca06711c8454615e79ad15d456d5ef7e7caf740647514ef17e25d29d43d42e3c4e82

  • SSDEEP

    12288:u4rXu0OVUf2Au746adZtIzkNDtZuFM9bT6f+N:1lOG2tJ89tMUI+

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      da80bd9f4b21617e9a5205650265dd4e978225afcfd1d409970217c81d74ea93

    • Size

      423KB

    • MD5

      1f033815c46ee1472050e0288511827d

    • SHA1

      04d2f7b95b4e1f751de59fccbe4cbb70968d6ce6

    • SHA256

      da80bd9f4b21617e9a5205650265dd4e978225afcfd1d409970217c81d74ea93

    • SHA512

      407274ab4da1f97cc82c6614972658db1df28b6433972ceba020b1c9aa7fca06711c8454615e79ad15d456d5ef7e7caf740647514ef17e25d29d43d42e3c4e82

    • SSDEEP

      12288:u4rXu0OVUf2Au746adZtIzkNDtZuFM9bT6f+N:1lOG2tJ89tMUI+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks