General

  • Target

    c5a39afaaf6b7bf79531b9d38ea92018b05e73977497f135e3f88da4c02c0b90

  • Size

    346KB

  • Sample

    241111-fa2x7aslgt

  • MD5

    9ee12dc50f690b000f1dc8bd0f26cd01

  • SHA1

    2604ded646ab4be93cbec05e17877a01a3c91f1f

  • SHA256

    c5a39afaaf6b7bf79531b9d38ea92018b05e73977497f135e3f88da4c02c0b90

  • SHA512

    87854a21e8e00db4def686bfb03dfddc0ff99039bfb868d87aec4bacc249c3d2f8a5b183c25b72f5ab7d2a1e546c9702223e1a3dc3f7c9cea6f4cf016c80c222

  • SSDEEP

    6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      c5a39afaaf6b7bf79531b9d38ea92018b05e73977497f135e3f88da4c02c0b90

    • Size

      346KB

    • MD5

      9ee12dc50f690b000f1dc8bd0f26cd01

    • SHA1

      2604ded646ab4be93cbec05e17877a01a3c91f1f

    • SHA256

      c5a39afaaf6b7bf79531b9d38ea92018b05e73977497f135e3f88da4c02c0b90

    • SHA512

      87854a21e8e00db4def686bfb03dfddc0ff99039bfb868d87aec4bacc249c3d2f8a5b183c25b72f5ab7d2a1e546c9702223e1a3dc3f7c9cea6f4cf016c80c222

    • SSDEEP

      6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks