General

  • Target

    e54d5b880b25f6de06b6a0a9912b15f6f29b2b3ec83ee619de2ce26a8550200a

  • Size

    423KB

  • Sample

    241110-wk4grsvnek

  • MD5

    e795256fed55aa555d36ffc8abeffcdd

  • SHA1

    7e169d54e4102f15d303903ee582c08313a230f7

  • SHA256

    e54d5b880b25f6de06b6a0a9912b15f6f29b2b3ec83ee619de2ce26a8550200a

  • SHA512

    875031e1c6cb5a8a1a94f8be79b06204c98f036f80daaf5708a3e27b2b8804cd0989ebf8da57acc3220fc926293fe26c7982b98d10d7a381b7c34bf0080b5789

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      e54d5b880b25f6de06b6a0a9912b15f6f29b2b3ec83ee619de2ce26a8550200a

    • Size

      423KB

    • MD5

      e795256fed55aa555d36ffc8abeffcdd

    • SHA1

      7e169d54e4102f15d303903ee582c08313a230f7

    • SHA256

      e54d5b880b25f6de06b6a0a9912b15f6f29b2b3ec83ee619de2ce26a8550200a

    • SHA512

      875031e1c6cb5a8a1a94f8be79b06204c98f036f80daaf5708a3e27b2b8804cd0989ebf8da57acc3220fc926293fe26c7982b98d10d7a381b7c34bf0080b5789

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks