General

  • Target

    1037e07429d00774d88f2f13eeb25443ac6e86a145bd4d56d58b33d40488b6e4

  • Size

    438KB

  • Sample

    241111-mz4lms1rfl

  • MD5

    614ffae6f977e3347b402ce1f81e5b24

  • SHA1

    c6765b181aeb6f51d8de55eddb76372448ace3db

  • SHA256

    1037e07429d00774d88f2f13eeb25443ac6e86a145bd4d56d58b33d40488b6e4

  • SHA512

    47b72522f5d970bef25c70a0c772c51f89fe2508122d9a39a3243e1801e7b32e0f4094e9357ca33fe51b50b4590dbea2eb7795c7731c9bb1b3a2abcc9056f832

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      1037e07429d00774d88f2f13eeb25443ac6e86a145bd4d56d58b33d40488b6e4

    • Size

      438KB

    • MD5

      614ffae6f977e3347b402ce1f81e5b24

    • SHA1

      c6765b181aeb6f51d8de55eddb76372448ace3db

    • SHA256

      1037e07429d00774d88f2f13eeb25443ac6e86a145bd4d56d58b33d40488b6e4

    • SHA512

      47b72522f5d970bef25c70a0c772c51f89fe2508122d9a39a3243e1801e7b32e0f4094e9357ca33fe51b50b4590dbea2eb7795c7731c9bb1b3a2abcc9056f832

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks