General

  • Target

    45934f35128164eeb9490533690e852093e260fccc77d2a37c8b1aef911527e7

  • Size

    370KB

  • Sample

    241110-ypbcwsthmd

  • MD5

    82ee4980f2a48459053899ab37eefea2

  • SHA1

    4a82871d1e3b7e15296e01a688fc0ba377a1ce30

  • SHA256

    45934f35128164eeb9490533690e852093e260fccc77d2a37c8b1aef911527e7

  • SHA512

    fc60eae22ae1a93f8478a40f45d6fad236d1d2f4bd4e5d53e906301928aab28429b903cc747af71fbf487cb9e643db2f33838fa24bd0bcb921e7d886abb81a65

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      45934f35128164eeb9490533690e852093e260fccc77d2a37c8b1aef911527e7

    • Size

      370KB

    • MD5

      82ee4980f2a48459053899ab37eefea2

    • SHA1

      4a82871d1e3b7e15296e01a688fc0ba377a1ce30

    • SHA256

      45934f35128164eeb9490533690e852093e260fccc77d2a37c8b1aef911527e7

    • SHA512

      fc60eae22ae1a93f8478a40f45d6fad236d1d2f4bd4e5d53e906301928aab28429b903cc747af71fbf487cb9e643db2f33838fa24bd0bcb921e7d886abb81a65

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks