General

  • Target

    820f237f006f6905690d2ea4315461f1889ef208278dd4fe41014e9c5241b75fN.exe

  • Size

    428KB

  • Sample

    241206-mranlatkcw

  • MD5

    2bc842af7a3e750bde22d5b5c1a12870

  • SHA1

    0a956b14cb5c1c45458452bffb43cbcca9f9bab2

  • SHA256

    820f237f006f6905690d2ea4315461f1889ef208278dd4fe41014e9c5241b75f

  • SHA512

    a513c55debb6fbe4fadbac5571d7798f91c2c15442affa81854fed71d3348c5fe100b15e04484de28a3154a583584829091abc5bb801e7164d16a60d8ab1210f

  • SSDEEP

    6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      820f237f006f6905690d2ea4315461f1889ef208278dd4fe41014e9c5241b75fN.exe

    • Size

      428KB

    • MD5

      2bc842af7a3e750bde22d5b5c1a12870

    • SHA1

      0a956b14cb5c1c45458452bffb43cbcca9f9bab2

    • SHA256

      820f237f006f6905690d2ea4315461f1889ef208278dd4fe41014e9c5241b75f

    • SHA512

      a513c55debb6fbe4fadbac5571d7798f91c2c15442affa81854fed71d3348c5fe100b15e04484de28a3154a583584829091abc5bb801e7164d16a60d8ab1210f

    • SSDEEP

      6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks