General

  • Target

    14fa2d462d2221aee31e44f018860da7f29e94f5ec634f8f60ef28bc923130c1

  • Size

    297KB

  • Sample

    241111-bmdnxaygpk

  • MD5

    89eaf8a7edda2333ab81f4e80b1fa662

  • SHA1

    fbfd8ba12cc95bd9cf8208bb6d7afcd67df5a6c5

  • SHA256

    14fa2d462d2221aee31e44f018860da7f29e94f5ec634f8f60ef28bc923130c1

  • SHA512

    258ce202d1227de0ff2ade5cbf6d6be70b13d8ed445a61f740126f4358feca22c9dcb6b06d98cddc220b865dd26b328c41213221772fe4c34622bb0e5bdfe6f6

  • SSDEEP

    6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      14fa2d462d2221aee31e44f018860da7f29e94f5ec634f8f60ef28bc923130c1

    • Size

      297KB

    • MD5

      89eaf8a7edda2333ab81f4e80b1fa662

    • SHA1

      fbfd8ba12cc95bd9cf8208bb6d7afcd67df5a6c5

    • SHA256

      14fa2d462d2221aee31e44f018860da7f29e94f5ec634f8f60ef28bc923130c1

    • SHA512

      258ce202d1227de0ff2ade5cbf6d6be70b13d8ed445a61f740126f4358feca22c9dcb6b06d98cddc220b865dd26b328c41213221772fe4c34622bb0e5bdfe6f6

    • SSDEEP

      6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks