General

  • Target

    28bd58849bc16c8e724610ed3a6457018826915693a62e7bdb8c4211a3b2d991

  • Size

    371KB

  • Sample

    241104-1nrdtsycpq

  • MD5

    00fcb05f0ab14ac59946bca333704e21

  • SHA1

    53060aaa268e70173f7e6bd707281c103fa4275c

  • SHA256

    28bd58849bc16c8e724610ed3a6457018826915693a62e7bdb8c4211a3b2d991

  • SHA512

    4440357f91564c806c20cfe02f72a4fa2ab1e5cfbcaf459790d0707c9ea50a6884f0f650c6819a783b93ac34e3a46d1ca34a345c895d63212556bf1dfc4f9ac5

  • SSDEEP

    6144:I1c95HIATYxl4z3GTkAe0YnGDw2IKcO/w+XiILU6dqb7ITsqXigaXwVfi:I1c95H7TYrCYkAepCw2oOI4kL7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      28bd58849bc16c8e724610ed3a6457018826915693a62e7bdb8c4211a3b2d991

    • Size

      371KB

    • MD5

      00fcb05f0ab14ac59946bca333704e21

    • SHA1

      53060aaa268e70173f7e6bd707281c103fa4275c

    • SHA256

      28bd58849bc16c8e724610ed3a6457018826915693a62e7bdb8c4211a3b2d991

    • SHA512

      4440357f91564c806c20cfe02f72a4fa2ab1e5cfbcaf459790d0707c9ea50a6884f0f650c6819a783b93ac34e3a46d1ca34a345c895d63212556bf1dfc4f9ac5

    • SSDEEP

      6144:I1c95HIATYxl4z3GTkAe0YnGDw2IKcO/w+XiILU6dqb7ITsqXigaXwVfi:I1c95H7TYrCYkAepCw2oOI4kL7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks