General

  • Target

    d688a4d880fb0c2aaa5add8a61b225dedadeac1bcb639acaad2daa12bc44f104

  • Size

    423KB

  • Sample

    241111-hfcllavdkj

  • MD5

    c188b6f337be203702a9c8f8c4a9fdf3

  • SHA1

    24fcfd07b3523983a37ec0686a0ecba8c955e59e

  • SHA256

    d688a4d880fb0c2aaa5add8a61b225dedadeac1bcb639acaad2daa12bc44f104

  • SHA512

    a9ea52b9046b8c63b828b39ead976557a7ffbbfa8185d248a30c621baff289a0fa3b3da2191b1826affa0a55bacdc7d58df27cdb48c24379e9afe9d84e537623

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d688a4d880fb0c2aaa5add8a61b225dedadeac1bcb639acaad2daa12bc44f104

    • Size

      423KB

    • MD5

      c188b6f337be203702a9c8f8c4a9fdf3

    • SHA1

      24fcfd07b3523983a37ec0686a0ecba8c955e59e

    • SHA256

      d688a4d880fb0c2aaa5add8a61b225dedadeac1bcb639acaad2daa12bc44f104

    • SHA512

      a9ea52b9046b8c63b828b39ead976557a7ffbbfa8185d248a30c621baff289a0fa3b3da2191b1826affa0a55bacdc7d58df27cdb48c24379e9afe9d84e537623

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks