General

  • Target

    c0f006a2b70143bb63e7c11467ae8a46461cb28f411a06e622a3327bb3d98b9a

  • Size

    297KB

  • Sample

    241104-1y2mjsybka

  • MD5

    c9f3743f17dc690df1bdeb353bfaaa5d

  • SHA1

    21f947fd52eb9a56ae72d3838b81f252550d0c04

  • SHA256

    c0f006a2b70143bb63e7c11467ae8a46461cb28f411a06e622a3327bb3d98b9a

  • SHA512

    e1b33acff4c4148eb9f56c7558e2bf06ac0bf1af0c373f1e542ffb7f97574536585fa6c29b2f9c4201e17e3a69052d2ccf49e8f16dcfe57f2717eacb0483da3d

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      c0f006a2b70143bb63e7c11467ae8a46461cb28f411a06e622a3327bb3d98b9a

    • Size

      297KB

    • MD5

      c9f3743f17dc690df1bdeb353bfaaa5d

    • SHA1

      21f947fd52eb9a56ae72d3838b81f252550d0c04

    • SHA256

      c0f006a2b70143bb63e7c11467ae8a46461cb28f411a06e622a3327bb3d98b9a

    • SHA512

      e1b33acff4c4148eb9f56c7558e2bf06ac0bf1af0c373f1e542ffb7f97574536585fa6c29b2f9c4201e17e3a69052d2ccf49e8f16dcfe57f2717eacb0483da3d

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks