General

  • Target

    b8923ebdb0beb9d1bbd67d30a55cf13825ddf03a1cf1e35539bf232884754183

  • Size

    293KB

  • Sample

    241111-ct8y3a1bqh

  • MD5

    cff33b5466a9d3e6327fe3db8ea8fc63

  • SHA1

    a2a1a51e28aaac18abf96dab12fbfe5685f5974a

  • SHA256

    b8923ebdb0beb9d1bbd67d30a55cf13825ddf03a1cf1e35539bf232884754183

  • SHA512

    3c329a4ef492469a6c3272e2a8a0e3cad12b813e2f2586938e6e676ef625dd66d844f80a5ab85ccbea1820b2076464372cf8fc9b5fef127eeae026aee69fd8e7

  • SSDEEP

    6144:1tsELLrvfWTvGXYH+N6ceavLw6yD2+elLrrlCckNuzbgwuB:1tsEnr3WTuXYH3cea06y4J/l2Nunnm

Malware Config

Extracted

Family

redline

Botnet

ww

C2

45.9.20.168:46257

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      b8923ebdb0beb9d1bbd67d30a55cf13825ddf03a1cf1e35539bf232884754183

    • Size

      293KB

    • MD5

      cff33b5466a9d3e6327fe3db8ea8fc63

    • SHA1

      a2a1a51e28aaac18abf96dab12fbfe5685f5974a

    • SHA256

      b8923ebdb0beb9d1bbd67d30a55cf13825ddf03a1cf1e35539bf232884754183

    • SHA512

      3c329a4ef492469a6c3272e2a8a0e3cad12b813e2f2586938e6e676ef625dd66d844f80a5ab85ccbea1820b2076464372cf8fc9b5fef127eeae026aee69fd8e7

    • SSDEEP

      6144:1tsELLrvfWTvGXYH+N6ceavLw6yD2+elLrrlCckNuzbgwuB:1tsEnr3WTuXYH3cea06y4J/l2Nunnm

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks