General

  • Target

    445c5aef52f1fecb204cf920b2bb4e8d43df731e76408c0eef53c30c67dc9179

  • Size

    297KB

  • Sample

    241104-2y24rayhmh

  • MD5

    6b46fff37d10a18d5a02803e2e4e05e5

  • SHA1

    1038d3d74e87e1ded190fe6140fcd73b1d6c3323

  • SHA256

    445c5aef52f1fecb204cf920b2bb4e8d43df731e76408c0eef53c30c67dc9179

  • SHA512

    45cb02ee3edf39c4a5e33840f04b584f41935d0573abcca7d11b2e105776c8b89a5fb62a73ee7928e6cae64050a4d867685a59f86e2de8c475038c86cd2754a7

  • SSDEEP

    6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      445c5aef52f1fecb204cf920b2bb4e8d43df731e76408c0eef53c30c67dc9179

    • Size

      297KB

    • MD5

      6b46fff37d10a18d5a02803e2e4e05e5

    • SHA1

      1038d3d74e87e1ded190fe6140fcd73b1d6c3323

    • SHA256

      445c5aef52f1fecb204cf920b2bb4e8d43df731e76408c0eef53c30c67dc9179

    • SHA512

      45cb02ee3edf39c4a5e33840f04b584f41935d0573abcca7d11b2e105776c8b89a5fb62a73ee7928e6cae64050a4d867685a59f86e2de8c475038c86cd2754a7

    • SSDEEP

      6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks