General

  • Target

    e815239f17fd8d8169e5acfbdc1e131ac30bda6bf375b375114ae3e06a12378f

  • Size

    445KB

  • Sample

    241111-aa21as1mal

  • MD5

    4266a7f5ee898743c8873f88019e732c

  • SHA1

    3401bed0f751b9ef81d48a01acb77a6dedccdc4f

  • SHA256

    e815239f17fd8d8169e5acfbdc1e131ac30bda6bf375b375114ae3e06a12378f

  • SHA512

    ab7ac558668f31f313762baa6702a75930cec86401a19aa1f7a0d710ad6b8467b7f3dbe487f10395a66da2d9eba43a6191e510468e694f4ff38d3be5f25871b5

  • SSDEEP

    12288:pZIEKbCXpYrnzBXjqMTNODhCjTq3tRu5xuSr:puoX6rnzBFNruK5x1

Malware Config

Extracted

Family

redline

Botnet

ww

C2

45.9.20.168:46257

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      e815239f17fd8d8169e5acfbdc1e131ac30bda6bf375b375114ae3e06a12378f

    • Size

      445KB

    • MD5

      4266a7f5ee898743c8873f88019e732c

    • SHA1

      3401bed0f751b9ef81d48a01acb77a6dedccdc4f

    • SHA256

      e815239f17fd8d8169e5acfbdc1e131ac30bda6bf375b375114ae3e06a12378f

    • SHA512

      ab7ac558668f31f313762baa6702a75930cec86401a19aa1f7a0d710ad6b8467b7f3dbe487f10395a66da2d9eba43a6191e510468e694f4ff38d3be5f25871b5

    • SSDEEP

      12288:pZIEKbCXpYrnzBXjqMTNODhCjTq3tRu5xuSr:puoX6rnzBFNruK5x1

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks