General

  • Target

    e53507a4206cbeabe5d1794a13de63cf227e3ea3d96b6439bfd8bfcf010afc54

  • Size

    423KB

  • Sample

    241111-hp8emavenq

  • MD5

    5a40a60dfbe60e1116b03561dbd8d889

  • SHA1

    afe8c3cb70e6681003805d9b7fab18f3e7e0c25b

  • SHA256

    e53507a4206cbeabe5d1794a13de63cf227e3ea3d96b6439bfd8bfcf010afc54

  • SHA512

    048a44785cb1dc33b4f5e12f941a6169e9cf5479e09c2aa11deb822e1567b835daa39d9a0e0317249a1a636ee21e0b925982a6bf62842192cf1720465df81c60

  • SSDEEP

    12288:u4rXu0OVUf2Au746adZtIzkNDtZuFM9bT6f+N:1lOG2tJ89tMUI+

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      e53507a4206cbeabe5d1794a13de63cf227e3ea3d96b6439bfd8bfcf010afc54

    • Size

      423KB

    • MD5

      5a40a60dfbe60e1116b03561dbd8d889

    • SHA1

      afe8c3cb70e6681003805d9b7fab18f3e7e0c25b

    • SHA256

      e53507a4206cbeabe5d1794a13de63cf227e3ea3d96b6439bfd8bfcf010afc54

    • SHA512

      048a44785cb1dc33b4f5e12f941a6169e9cf5479e09c2aa11deb822e1567b835daa39d9a0e0317249a1a636ee21e0b925982a6bf62842192cf1720465df81c60

    • SSDEEP

      12288:u4rXu0OVUf2Au746adZtIzkNDtZuFM9bT6f+N:1lOG2tJ89tMUI+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks