General

  • Target

    e3ffb393ca65e664b4f1db06f084c0335b5507899dab1e4173d45db34f614a36N.exe

  • Size

    438KB

  • Sample

    241112-akj78szgpp

  • MD5

    822d3ecf8c4e202a4cbb3f0a20cb0b27

  • SHA1

    8a3bbb6df817c9459f68559b552fa756a85d9487

  • SHA256

    a34e17d6dee82504fa9e0dba94f7e1bd9d3c673ee2f4792e3606f9cf51a0ce00

  • SHA512

    8f092f3b7a8be57d4efec5b0974261457cc026bdcf154814bb472cb17376e7afb9365f1fcaff68de6af6f996f9e79331fa1e91aa4af50dd7cd99b462c51f3cc8

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPnog:1cqxx1p8LK8KQc/

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      e3ffb393ca65e664b4f1db06f084c0335b5507899dab1e4173d45db34f614a36N.exe

    • Size

      438KB

    • MD5

      822d3ecf8c4e202a4cbb3f0a20cb0b27

    • SHA1

      8a3bbb6df817c9459f68559b552fa756a85d9487

    • SHA256

      a34e17d6dee82504fa9e0dba94f7e1bd9d3c673ee2f4792e3606f9cf51a0ce00

    • SHA512

      8f092f3b7a8be57d4efec5b0974261457cc026bdcf154814bb472cb17376e7afb9365f1fcaff68de6af6f996f9e79331fa1e91aa4af50dd7cd99b462c51f3cc8

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPnog:1cqxx1p8LK8KQc/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks