General

  • Target

    b0d1b4dc3fc3965d26265350eda88ee0c43847d809fa6f38204aa7c1a199d991

  • Size

    438KB

  • Sample

    241110-ss8jxaynh1

  • MD5

    6583d5ce3eea34be210f8a664aec0da4

  • SHA1

    728559bf808bd89f78ef57a9caaa661f4fd2ff3a

  • SHA256

    b0d1b4dc3fc3965d26265350eda88ee0c43847d809fa6f38204aa7c1a199d991

  • SHA512

    a7eb7b551042e420078443d234525a27282e54aa3bbf9db1aa5232667ed344aa15b0e49f0028eb2d9653f396be18470b6e1d5b184f2844e989b42c1ee61b3528

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      b0d1b4dc3fc3965d26265350eda88ee0c43847d809fa6f38204aa7c1a199d991

    • Size

      438KB

    • MD5

      6583d5ce3eea34be210f8a664aec0da4

    • SHA1

      728559bf808bd89f78ef57a9caaa661f4fd2ff3a

    • SHA256

      b0d1b4dc3fc3965d26265350eda88ee0c43847d809fa6f38204aa7c1a199d991

    • SHA512

      a7eb7b551042e420078443d234525a27282e54aa3bbf9db1aa5232667ed344aa15b0e49f0028eb2d9653f396be18470b6e1d5b184f2844e989b42c1ee61b3528

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks