General

  • Target

    1cec86a4255bfdd3583df2a39700a6eade002bb11085da7c4d4414074c1be73f.exe

  • Size

    410KB

  • Sample

    241111-bhds4szbld

  • MD5

    e79cd76337180135d24e944202e4ac67

  • SHA1

    bf2883dbf2ab28f81893e8df4eca636d626f247d

  • SHA256

    1cec86a4255bfdd3583df2a39700a6eade002bb11085da7c4d4414074c1be73f

  • SHA512

    163f09b69d75ae18bf4b9c09d4e387b2e74aa4986857aab38a86ffb803124f1ae00bd9dd8b929e02d2e2d1110ef13966b9471485e0fd469db0f8672f7eaf2601

  • SSDEEP

    6144:G/H4UvwYogRhavtZSh7URusIGG+xdWnPbc4dtHMWJnd:mYDQwVMh4IGG+xdWDc4dtHFld

Malware Config

Extracted

Family

redline

Botnet

170

C2

45.9.20.240:46257

Attributes
  • auth_value

    73f905977a8199ea3d396a0a7d0ae6c8

Targets

    • Target

      1cec86a4255bfdd3583df2a39700a6eade002bb11085da7c4d4414074c1be73f.exe

    • Size

      410KB

    • MD5

      e79cd76337180135d24e944202e4ac67

    • SHA1

      bf2883dbf2ab28f81893e8df4eca636d626f247d

    • SHA256

      1cec86a4255bfdd3583df2a39700a6eade002bb11085da7c4d4414074c1be73f

    • SHA512

      163f09b69d75ae18bf4b9c09d4e387b2e74aa4986857aab38a86ffb803124f1ae00bd9dd8b929e02d2e2d1110ef13966b9471485e0fd469db0f8672f7eaf2601

    • SSDEEP

      6144:G/H4UvwYogRhavtZSh7URusIGG+xdWnPbc4dtHMWJnd:mYDQwVMh4IGG+xdWDc4dtHFld

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks