General

  • Target

    d719efc0ffe48177a64203420d9b05b54c72807e6de480935bb8b2e4fc8e8998

  • Size

    297KB

  • Sample

    241111-ekysvawkcm

  • MD5

    96db84d3961cf12fed6f121606bb978d

  • SHA1

    2dff72e524dd4be36e81d8abcd78c22e420cf9cf

  • SHA256

    d719efc0ffe48177a64203420d9b05b54c72807e6de480935bb8b2e4fc8e8998

  • SHA512

    95a90ae0f90c62f3fe219ecda7ea278b76428c419a8e44276f41e59c2906fdd0e9652612f4e3808775819e7471db9212048e0acb290873cd8196aa654f1c301d

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d719efc0ffe48177a64203420d9b05b54c72807e6de480935bb8b2e4fc8e8998

    • Size

      297KB

    • MD5

      96db84d3961cf12fed6f121606bb978d

    • SHA1

      2dff72e524dd4be36e81d8abcd78c22e420cf9cf

    • SHA256

      d719efc0ffe48177a64203420d9b05b54c72807e6de480935bb8b2e4fc8e8998

    • SHA512

      95a90ae0f90c62f3fe219ecda7ea278b76428c419a8e44276f41e59c2906fdd0e9652612f4e3808775819e7471db9212048e0acb290873cd8196aa654f1c301d

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks