General

  • Target

    5ec915d9035097215e3f330b03b54488b04c6503e90b8ed6a326bbf1bb84e0b4

  • Size

    411KB

  • Sample

    241111-hgzshsvdmm

  • MD5

    4fbf6abf0301dedbcb383571a6ec5f81

  • SHA1

    92a55ff5c132e96279b1c8e81a7febe6eb00f658

  • SHA256

    5ec915d9035097215e3f330b03b54488b04c6503e90b8ed6a326bbf1bb84e0b4

  • SHA512

    0b2e9ff3c8accb71a5ac440bbc0cfa1877bf43e66607963c63161447f43f187b0606384af971c9cb1998d6ea5b2fd55484560edb4f29ae65544217caad1f10f3

  • SSDEEP

    12288:QOHOqFFCzvGUHZ1olS7wAxlSoEYInaHqL:nFHW/4SioEYfKL

Malware Config

Extracted

Family

redline

Botnet

170

C2

45.9.20.240:46257

Attributes
  • auth_value

    73f905977a8199ea3d396a0a7d0ae6c8

Targets

    • Target

      5ec915d9035097215e3f330b03b54488b04c6503e90b8ed6a326bbf1bb84e0b4

    • Size

      411KB

    • MD5

      4fbf6abf0301dedbcb383571a6ec5f81

    • SHA1

      92a55ff5c132e96279b1c8e81a7febe6eb00f658

    • SHA256

      5ec915d9035097215e3f330b03b54488b04c6503e90b8ed6a326bbf1bb84e0b4

    • SHA512

      0b2e9ff3c8accb71a5ac440bbc0cfa1877bf43e66607963c63161447f43f187b0606384af971c9cb1998d6ea5b2fd55484560edb4f29ae65544217caad1f10f3

    • SSDEEP

      12288:QOHOqFFCzvGUHZ1olS7wAxlSoEYInaHqL:nFHW/4SioEYfKL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks