General

  • Target

    5990f4e922e0e1640188d40a1fb458a659d4f302c20e37ebafa69588a7565a9b

  • Size

    297KB

  • Sample

    241111-jbsmpavldy

  • MD5

    a354ae54526b50aadbdfaeab0762fced

  • SHA1

    f9756a25687b236c4f5d76fbd1077c5468e55e0f

  • SHA256

    5990f4e922e0e1640188d40a1fb458a659d4f302c20e37ebafa69588a7565a9b

  • SHA512

    2134e5b2ea09d1a0bdaa7889373084adc2a1ca579ba0231394e9146c941ead14018d9f81badb85085844abcf20155dcc25bb1d5f828fd8467f918d9dc09628bb

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      5990f4e922e0e1640188d40a1fb458a659d4f302c20e37ebafa69588a7565a9b

    • Size

      297KB

    • MD5

      a354ae54526b50aadbdfaeab0762fced

    • SHA1

      f9756a25687b236c4f5d76fbd1077c5468e55e0f

    • SHA256

      5990f4e922e0e1640188d40a1fb458a659d4f302c20e37ebafa69588a7565a9b

    • SHA512

      2134e5b2ea09d1a0bdaa7889373084adc2a1ca579ba0231394e9146c941ead14018d9f81badb85085844abcf20155dcc25bb1d5f828fd8467f918d9dc09628bb

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks