General

  • Target

    9d5164cda6f407dd2bce4306d29efc0f2cef13992d19b87f2a72671ca7e9cdf0

  • Size

    298KB

  • Sample

    241111-dk9dxa1jaz

  • MD5

    8a5a09a5815f7c87991dc9c1104c7b0a

  • SHA1

    48330ad4359a32ab9e0f17912e4b18d9e26c7530

  • SHA256

    9d5164cda6f407dd2bce4306d29efc0f2cef13992d19b87f2a72671ca7e9cdf0

  • SHA512

    fb21d7cdaae4c31c38ed7e468a8b2f6341a511a57d6e36b44bf6cbbb09bbd5cebb9cf6b5bbfa0215f77708e59292bb06d8e60c41b5f76f6fafec8dc407c60ccf

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      9d5164cda6f407dd2bce4306d29efc0f2cef13992d19b87f2a72671ca7e9cdf0

    • Size

      298KB

    • MD5

      8a5a09a5815f7c87991dc9c1104c7b0a

    • SHA1

      48330ad4359a32ab9e0f17912e4b18d9e26c7530

    • SHA256

      9d5164cda6f407dd2bce4306d29efc0f2cef13992d19b87f2a72671ca7e9cdf0

    • SHA512

      fb21d7cdaae4c31c38ed7e468a8b2f6341a511a57d6e36b44bf6cbbb09bbd5cebb9cf6b5bbfa0215f77708e59292bb06d8e60c41b5f76f6fafec8dc407c60ccf

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks