General

  • Target

    5b3b9ca388ae28698bcc5d4cf00c0f85e8b1a6dc201f5dbf68ccadccdfceb3b7

  • Size

    371KB

  • Sample

    241111-jaxj9avlbz

  • MD5

    1d2fd5296d4ed13ce956c828b01d81ae

  • SHA1

    01dcf4a9a9e04d054ef2e177bcfe6e7e946be686

  • SHA256

    5b3b9ca388ae28698bcc5d4cf00c0f85e8b1a6dc201f5dbf68ccadccdfceb3b7

  • SHA512

    c6513e1e9a9522a2d59fcc000c8eed83e4c64f8bf09ae53c640acff54c656bf362dd05e353cbe821a65f45996fdb24ee68f8f59f288bc8daf7727de31f489350

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      5b3b9ca388ae28698bcc5d4cf00c0f85e8b1a6dc201f5dbf68ccadccdfceb3b7

    • Size

      371KB

    • MD5

      1d2fd5296d4ed13ce956c828b01d81ae

    • SHA1

      01dcf4a9a9e04d054ef2e177bcfe6e7e946be686

    • SHA256

      5b3b9ca388ae28698bcc5d4cf00c0f85e8b1a6dc201f5dbf68ccadccdfceb3b7

    • SHA512

      c6513e1e9a9522a2d59fcc000c8eed83e4c64f8bf09ae53c640acff54c656bf362dd05e353cbe821a65f45996fdb24ee68f8f59f288bc8daf7727de31f489350

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks