General

  • Target

    2803240c657c8ed806dbdd8abe87b13c49bd0d6d79ea94b66c0709ff27a7f9d4

  • Size

    370KB

  • Sample

    241111-ge1rcstjhv

  • MD5

    8c818aaf7065dc7ee173f159468b2bca

  • SHA1

    4db803c5e3fd4154e903692b8cb982a24c1878da

  • SHA256

    2803240c657c8ed806dbdd8abe87b13c49bd0d6d79ea94b66c0709ff27a7f9d4

  • SHA512

    921eea897dbb4f150ef0110f38027593d58f4ba9ea6ea2008c15350bdb127ce714ddcb6d87b89c7c23c6315f22b47f444ba8b6cca904d9fd6b5d531c97f0c49a

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2803240c657c8ed806dbdd8abe87b13c49bd0d6d79ea94b66c0709ff27a7f9d4

    • Size

      370KB

    • MD5

      8c818aaf7065dc7ee173f159468b2bca

    • SHA1

      4db803c5e3fd4154e903692b8cb982a24c1878da

    • SHA256

      2803240c657c8ed806dbdd8abe87b13c49bd0d6d79ea94b66c0709ff27a7f9d4

    • SHA512

      921eea897dbb4f150ef0110f38027593d58f4ba9ea6ea2008c15350bdb127ce714ddcb6d87b89c7c23c6315f22b47f444ba8b6cca904d9fd6b5d531c97f0c49a

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks