General

  • Target

    b54a156ce36df453b2bb3e7da059c05b7639510191a1987d24232be137e6382f

  • Size

    383KB

  • Sample

    241110-r27hjaygng

  • MD5

    9e3001b003839b9ae576b3aa62100697

  • SHA1

    21419633fef6a4da3e14e0fc6b78d4153f13c231

  • SHA256

    b54a156ce36df453b2bb3e7da059c05b7639510191a1987d24232be137e6382f

  • SHA512

    0ca52eb69021780a3c83a9cee0a4c26c46040843c1b0fa9db899cad6b729a6dbd286fcee97e34cd8843604da3b72ce79d6370e5e7b451b58355f1bf0987aec2e

  • SSDEEP

    6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      b54a156ce36df453b2bb3e7da059c05b7639510191a1987d24232be137e6382f

    • Size

      383KB

    • MD5

      9e3001b003839b9ae576b3aa62100697

    • SHA1

      21419633fef6a4da3e14e0fc6b78d4153f13c231

    • SHA256

      b54a156ce36df453b2bb3e7da059c05b7639510191a1987d24232be137e6382f

    • SHA512

      0ca52eb69021780a3c83a9cee0a4c26c46040843c1b0fa9db899cad6b729a6dbd286fcee97e34cd8843604da3b72ce79d6370e5e7b451b58355f1bf0987aec2e

    • SSDEEP

      6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks