General

  • Target

    d8ddd5a6f867c4c8bbf541ffd258f3e35146faf2b924f3f4c01e50e31afae1ae

  • Size

    410KB

  • Sample

    241111-cvz3jszhkn

  • MD5

    54eb78addc8429f18df8dcf0cdafad00

  • SHA1

    b85560e26d44440fb139f14cff5d3934432a5220

  • SHA256

    d8ddd5a6f867c4c8bbf541ffd258f3e35146faf2b924f3f4c01e50e31afae1ae

  • SHA512

    429485f7bf788cf1d10034fea889440ebb5ace4dcea54531de30d67d2485e4df2e01b6ad245a7ca5061f476b8e7bcc2e1e46e209aa02c6498089c69d93b40dcb

  • SSDEEP

    6144:xe7JNLtZXhjwNjndQBvVDFcK5ykXWxpyk11EcQx06SnBz:oJNLFwhd4VDFrykXWxpyKEcQx07B

Malware Config

Extracted

Family

redline

Botnet

170

C2

45.9.20.240:46257

Attributes
  • auth_value

    73f905977a8199ea3d396a0a7d0ae6c8

Targets

    • Target

      d8ddd5a6f867c4c8bbf541ffd258f3e35146faf2b924f3f4c01e50e31afae1ae

    • Size

      410KB

    • MD5

      54eb78addc8429f18df8dcf0cdafad00

    • SHA1

      b85560e26d44440fb139f14cff5d3934432a5220

    • SHA256

      d8ddd5a6f867c4c8bbf541ffd258f3e35146faf2b924f3f4c01e50e31afae1ae

    • SHA512

      429485f7bf788cf1d10034fea889440ebb5ace4dcea54531de30d67d2485e4df2e01b6ad245a7ca5061f476b8e7bcc2e1e46e209aa02c6498089c69d93b40dcb

    • SSDEEP

      6144:xe7JNLtZXhjwNjndQBvVDFcK5ykXWxpyk11EcQx06SnBz:oJNLFwhd4VDFrykXWxpyKEcQx07B

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks