General

  • Target

    28b68de1180c7e1db07aeb6a89c7e1e51abe777c01cd194ab8d69f1239e3a6b2

  • Size

    370KB

  • Sample

    241111-ld2pgsxcnk

  • MD5

    4dfcd0cb9e79e7922508c89101402ce5

  • SHA1

    ecb081f6bdbaf76493fe3a666d24eab5e5b977ea

  • SHA256

    28b68de1180c7e1db07aeb6a89c7e1e51abe777c01cd194ab8d69f1239e3a6b2

  • SHA512

    b53c720eacbf832b4dee2fd30b0af999e01026686da2c584907b5a66edc7c662630f28d632201f9fc83530499f67aba288758bb606909876b2d9860745fe50c4

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      28b68de1180c7e1db07aeb6a89c7e1e51abe777c01cd194ab8d69f1239e3a6b2

    • Size

      370KB

    • MD5

      4dfcd0cb9e79e7922508c89101402ce5

    • SHA1

      ecb081f6bdbaf76493fe3a666d24eab5e5b977ea

    • SHA256

      28b68de1180c7e1db07aeb6a89c7e1e51abe777c01cd194ab8d69f1239e3a6b2

    • SHA512

      b53c720eacbf832b4dee2fd30b0af999e01026686da2c584907b5a66edc7c662630f28d632201f9fc83530499f67aba288758bb606909876b2d9860745fe50c4

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks