General

  • Target

    ae82177914159fe7af5d656f1414d4bcca51877eea8d3f2c5a5da4badfa08775

  • Size

    297KB

  • Sample

    241111-ej7z5asdlp

  • MD5

    598b263c48bb028db1d91d7ad093e7e3

  • SHA1

    48b2c85f689982e193bd9e89660ef0d43a5ea7f1

  • SHA256

    ae82177914159fe7af5d656f1414d4bcca51877eea8d3f2c5a5da4badfa08775

  • SHA512

    a337c46d6143b0c3d6867fa63b0c005b84e809c791af4aa8accd69da15ce14323ae7c51416030800a242d46e1885e3ff91f181ab4a3ace221afb1ab4aa629ddd

  • SSDEEP

    6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      ae82177914159fe7af5d656f1414d4bcca51877eea8d3f2c5a5da4badfa08775

    • Size

      297KB

    • MD5

      598b263c48bb028db1d91d7ad093e7e3

    • SHA1

      48b2c85f689982e193bd9e89660ef0d43a5ea7f1

    • SHA256

      ae82177914159fe7af5d656f1414d4bcca51877eea8d3f2c5a5da4badfa08775

    • SHA512

      a337c46d6143b0c3d6867fa63b0c005b84e809c791af4aa8accd69da15ce14323ae7c51416030800a242d46e1885e3ff91f181ab4a3ace221afb1ab4aa629ddd

    • SSDEEP

      6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks