General

  • Target

    347dbd57456317aef2c5e54c0fd270fcab1aa9344c28aa335e4a44b5983de0ff

  • Size

    445KB

  • Sample

    241111-ad7d7axmcz

  • MD5

    34c235778211aa474a97e09473501272

  • SHA1

    da19458bea52cb4a417f996d7d3d9d7726a879c8

  • SHA256

    347dbd57456317aef2c5e54c0fd270fcab1aa9344c28aa335e4a44b5983de0ff

  • SHA512

    1188f2c1f4048b54763b53886216ad5f50a65d5ef6272e03cada1278f6c969d8a1a28c3b2d3fb8260391c4240e1d75714d7b984317a661f5ae55296e6c1cc005

  • SSDEEP

    6144:jzdQcuKrRosANpXrZMJ2jIT2LfiXhJf1tSdf90LblwNP3zlUR5/+6lQKR:tQ70i9MJ+LfiDdER2LblUP3JUR5/rP

Malware Config

Extracted

Family

redline

Botnet

ww

C2

45.9.20.168:46257

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      347dbd57456317aef2c5e54c0fd270fcab1aa9344c28aa335e4a44b5983de0ff

    • Size

      445KB

    • MD5

      34c235778211aa474a97e09473501272

    • SHA1

      da19458bea52cb4a417f996d7d3d9d7726a879c8

    • SHA256

      347dbd57456317aef2c5e54c0fd270fcab1aa9344c28aa335e4a44b5983de0ff

    • SHA512

      1188f2c1f4048b54763b53886216ad5f50a65d5ef6272e03cada1278f6c969d8a1a28c3b2d3fb8260391c4240e1d75714d7b984317a661f5ae55296e6c1cc005

    • SSDEEP

      6144:jzdQcuKrRosANpXrZMJ2jIT2LfiXhJf1tSdf90LblwNP3zlUR5/+6lQKR:tQ70i9MJ+LfiDdER2LblUP3JUR5/rP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks