General

  • Target

    82e8868ac90e045888faaab0439b7637dc382671cd0dfa6e1784ba269d6686fb

  • Size

    438KB

  • Sample

    241111-hj9eqsvgrd

  • MD5

    420b50e3db43a2da9543308b3be14a72

  • SHA1

    7ea522dcf8b878deb950658e222c6891a668d127

  • SHA256

    82e8868ac90e045888faaab0439b7637dc382671cd0dfa6e1784ba269d6686fb

  • SHA512

    d8ff1242bae168ecd06cdb3d6803d8c96571b0fda9057e6541706931c2ea10f92efe3975f263831ebd033fce6071966ab7ff1f0f14aebce56a1c28f83d1fe7d9

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      82e8868ac90e045888faaab0439b7637dc382671cd0dfa6e1784ba269d6686fb

    • Size

      438KB

    • MD5

      420b50e3db43a2da9543308b3be14a72

    • SHA1

      7ea522dcf8b878deb950658e222c6891a668d127

    • SHA256

      82e8868ac90e045888faaab0439b7637dc382671cd0dfa6e1784ba269d6686fb

    • SHA512

      d8ff1242bae168ecd06cdb3d6803d8c96571b0fda9057e6541706931c2ea10f92efe3975f263831ebd033fce6071966ab7ff1f0f14aebce56a1c28f83d1fe7d9

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks