General

  • Target

    6423c854296f6d37c4541f5c2d4c822e38cf2679729d78de2ec386dc4ca20127

  • Size

    371KB

  • Sample

    241104-2m1rjsyfmh

  • MD5

    417ff52c343b515963f195114d4cf863

  • SHA1

    b51e58af0553924b05f640627462a77fd31c605e

  • SHA256

    6423c854296f6d37c4541f5c2d4c822e38cf2679729d78de2ec386dc4ca20127

  • SHA512

    553d1cd233c1aee8623bfc23bf7bf8ebdd57b581b7a2fdf92cae0ece297b11f961c555c60b6a86a93fb043eca2625cf0fce41f69298f74e8b9e0185e1b4e2ab3

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6423c854296f6d37c4541f5c2d4c822e38cf2679729d78de2ec386dc4ca20127

    • Size

      371KB

    • MD5

      417ff52c343b515963f195114d4cf863

    • SHA1

      b51e58af0553924b05f640627462a77fd31c605e

    • SHA256

      6423c854296f6d37c4541f5c2d4c822e38cf2679729d78de2ec386dc4ca20127

    • SHA512

      553d1cd233c1aee8623bfc23bf7bf8ebdd57b581b7a2fdf92cae0ece297b11f961c555c60b6a86a93fb043eca2625cf0fce41f69298f74e8b9e0185e1b4e2ab3

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks