General

  • Target

    e3edd36409eacd07f6265a8db3ef2e8195347c289e18c3f3108959e996848b70

  • Size

    410KB

  • Sample

    241110-pny8wswmbt

  • MD5

    62c3b28ee90bfd7065e82d6eb4ddaabe

  • SHA1

    ee2d9e2f706afa8eaa10a7ced7f2df5a18a60476

  • SHA256

    e3edd36409eacd07f6265a8db3ef2e8195347c289e18c3f3108959e996848b70

  • SHA512

    a628dada843e2574c644ff391792d360f0be5e2791c1e1452cf3bfc72b1e2e7a8cc55a33d6447d93ec1b17c9ba97c7891b0a1514a5986855849e69eb6440a711

  • SSDEEP

    6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      e3edd36409eacd07f6265a8db3ef2e8195347c289e18c3f3108959e996848b70

    • Size

      410KB

    • MD5

      62c3b28ee90bfd7065e82d6eb4ddaabe

    • SHA1

      ee2d9e2f706afa8eaa10a7ced7f2df5a18a60476

    • SHA256

      e3edd36409eacd07f6265a8db3ef2e8195347c289e18c3f3108959e996848b70

    • SHA512

      a628dada843e2574c644ff391792d360f0be5e2791c1e1452cf3bfc72b1e2e7a8cc55a33d6447d93ec1b17c9ba97c7891b0a1514a5986855849e69eb6440a711

    • SSDEEP

      6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks