General

  • Target

    47e3616d3e8640d73070733499150ed81fdd84ffab705a5cd24902f0989e35a8

  • Size

    438KB

  • Sample

    241110-q19e3a1lcn

  • MD5

    3c245210443d9ccab8e78bf890684624

  • SHA1

    a8a317b2af391fff09da6256193244fa98773832

  • SHA256

    47e3616d3e8640d73070733499150ed81fdd84ffab705a5cd24902f0989e35a8

  • SHA512

    35de2c7408369a50de0f5d0fae2d6c9aed6b042922b0fc7112c8b3c01161eeb842c10b0afa18c1f25d8fa205d1dfa9ec155bc42bef2cc38f669182c916191206

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      47e3616d3e8640d73070733499150ed81fdd84ffab705a5cd24902f0989e35a8

    • Size

      438KB

    • MD5

      3c245210443d9ccab8e78bf890684624

    • SHA1

      a8a317b2af391fff09da6256193244fa98773832

    • SHA256

      47e3616d3e8640d73070733499150ed81fdd84ffab705a5cd24902f0989e35a8

    • SHA512

      35de2c7408369a50de0f5d0fae2d6c9aed6b042922b0fc7112c8b3c01161eeb842c10b0afa18c1f25d8fa205d1dfa9ec155bc42bef2cc38f669182c916191206

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks