General

  • Target

    9ae35a0d45922d2cc68d833cd9fdbce88cb323d77e3901e810b5da8dc74fa400

  • Size

    373KB

  • Sample

    241111-ktw89szqan

  • MD5

    2efb7bd66180a5f7848cc5d0ab620ad2

  • SHA1

    2aee8f9945c9ab51802e7bfc09c27add12f18a77

  • SHA256

    9ae35a0d45922d2cc68d833cd9fdbce88cb323d77e3901e810b5da8dc74fa400

  • SHA512

    1b261e0f5df29cc7e7a99b2b4e7bdd7c2bb0fa001ee6a61bd7b99bcd543cf981e06db717ab47a0eed5613913fed0eea3adf37c0de211e35be416930327835ea5

  • SSDEEP

    6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      9ae35a0d45922d2cc68d833cd9fdbce88cb323d77e3901e810b5da8dc74fa400

    • Size

      373KB

    • MD5

      2efb7bd66180a5f7848cc5d0ab620ad2

    • SHA1

      2aee8f9945c9ab51802e7bfc09c27add12f18a77

    • SHA256

      9ae35a0d45922d2cc68d833cd9fdbce88cb323d77e3901e810b5da8dc74fa400

    • SHA512

      1b261e0f5df29cc7e7a99b2b4e7bdd7c2bb0fa001ee6a61bd7b99bcd543cf981e06db717ab47a0eed5613913fed0eea3adf37c0de211e35be416930327835ea5

    • SSDEEP

      6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks