General

  • Target

    4a3d5ac24520c2e38f05ee3547865a71ef0de0bed0a1919bb3544548ec70cbae

  • Size

    298KB

  • Sample

    241111-bre3jaymct

  • MD5

    141c97f0572e7806b6c113a7f186f92b

  • SHA1

    9f7a9c7f056b792f5513c3f2b4a37585aadb5fb0

  • SHA256

    4a3d5ac24520c2e38f05ee3547865a71ef0de0bed0a1919bb3544548ec70cbae

  • SHA512

    1d165a8c417e0d5e803c1548b7f9497a1e75aadf86de1e04ca21a213d375b4070f6899d43ba6b880c0e88a61f7826d2dad62152264a0834192dbd78d9fd74172

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      4a3d5ac24520c2e38f05ee3547865a71ef0de0bed0a1919bb3544548ec70cbae

    • Size

      298KB

    • MD5

      141c97f0572e7806b6c113a7f186f92b

    • SHA1

      9f7a9c7f056b792f5513c3f2b4a37585aadb5fb0

    • SHA256

      4a3d5ac24520c2e38f05ee3547865a71ef0de0bed0a1919bb3544548ec70cbae

    • SHA512

      1d165a8c417e0d5e803c1548b7f9497a1e75aadf86de1e04ca21a213d375b4070f6899d43ba6b880c0e88a61f7826d2dad62152264a0834192dbd78d9fd74172

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks