General

  • Target

    c33760766b4404366b722edaf4bd1f56d30ffd75d01c3fa658f47b6a5b4ae772

  • Size

    423KB

  • Sample

    241104-3g3jmaypdw

  • MD5

    f6e3465fb97b735ab71ffd70f968dcf4

  • SHA1

    6cd884fddc9af72b873d6e04f134c0afb81d9d7f

  • SHA256

    c33760766b4404366b722edaf4bd1f56d30ffd75d01c3fa658f47b6a5b4ae772

  • SHA512

    32261211e908f4fc3e5e929bcff14f59270de40bb7b9107dd80d4f497840152f70b4ff07736ea72f1edc993f982c71f3229e82a74ba3322ea0d9a054b674017b

  • SSDEEP

    6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      c33760766b4404366b722edaf4bd1f56d30ffd75d01c3fa658f47b6a5b4ae772

    • Size

      423KB

    • MD5

      f6e3465fb97b735ab71ffd70f968dcf4

    • SHA1

      6cd884fddc9af72b873d6e04f134c0afb81d9d7f

    • SHA256

      c33760766b4404366b722edaf4bd1f56d30ffd75d01c3fa658f47b6a5b4ae772

    • SHA512

      32261211e908f4fc3e5e929bcff14f59270de40bb7b9107dd80d4f497840152f70b4ff07736ea72f1edc993f982c71f3229e82a74ba3322ea0d9a054b674017b

    • SSDEEP

      6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks