General

  • Target

    3bd14a6db093386fa8a9ddb1c014e8fec43619698b0fb2c87544e354e082aaf0

  • Size

    298KB

  • Sample

    241111-gt6adsvajq

  • MD5

    86d79faf76dc84467b27cfd4d7587be5

  • SHA1

    4d149c750af4e2def82a3f144b273046d82f9cea

  • SHA256

    3bd14a6db093386fa8a9ddb1c014e8fec43619698b0fb2c87544e354e082aaf0

  • SHA512

    c8d3cba114b0803c541445c287d342248d006afff461cdbe5d1642f214b2356969cbf02cd8d1cdbe4440bc5533c2cb2d548ada2c0ffa332fe533b0928c5db30a

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      3bd14a6db093386fa8a9ddb1c014e8fec43619698b0fb2c87544e354e082aaf0

    • Size

      298KB

    • MD5

      86d79faf76dc84467b27cfd4d7587be5

    • SHA1

      4d149c750af4e2def82a3f144b273046d82f9cea

    • SHA256

      3bd14a6db093386fa8a9ddb1c014e8fec43619698b0fb2c87544e354e082aaf0

    • SHA512

      c8d3cba114b0803c541445c287d342248d006afff461cdbe5d1642f214b2356969cbf02cd8d1cdbe4440bc5533c2cb2d548ada2c0ffa332fe533b0928c5db30a

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks