General

  • Target

    14102efcb8fa2180675648dc3754198d0f1b1c324c7e0d62f32c738ab093b7bf

  • Size

    445KB

  • Sample

    241111-gj33aaxngk

  • MD5

    351b5f80e27fd51f708a1b074cf1ce4d

  • SHA1

    6054a85406e52d0f6aa6ab350e98cfcc19e2db21

  • SHA256

    14102efcb8fa2180675648dc3754198d0f1b1c324c7e0d62f32c738ab093b7bf

  • SHA512

    b41038cc3b23385c3635dc87935158cdb40722872b98912ad315d694086936e3455a915794c697630bf0aa2b7c9cb6017e2204bcec5e03c1a4c9c8ca2e0273e0

  • SSDEEP

    12288:3thagedRc89jhwN+XmLkfJ9hlt//CQ5m:dhTmRc8fXXzdC

Malware Config

Extracted

Family

redline

Botnet

ww

C2

45.9.20.168:46257

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      14102efcb8fa2180675648dc3754198d0f1b1c324c7e0d62f32c738ab093b7bf

    • Size

      445KB

    • MD5

      351b5f80e27fd51f708a1b074cf1ce4d

    • SHA1

      6054a85406e52d0f6aa6ab350e98cfcc19e2db21

    • SHA256

      14102efcb8fa2180675648dc3754198d0f1b1c324c7e0d62f32c738ab093b7bf

    • SHA512

      b41038cc3b23385c3635dc87935158cdb40722872b98912ad315d694086936e3455a915794c697630bf0aa2b7c9cb6017e2204bcec5e03c1a4c9c8ca2e0273e0

    • SSDEEP

      12288:3thagedRc89jhwN+XmLkfJ9hlt//CQ5m:dhTmRc8fXXzdC

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks