General

  • Target

    6f66ae53f3644b91d4e532d34c49e3b496c0e5275672bd80af296ac01577794d

  • Size

    297KB

  • Sample

    241104-rtf1ls1gnr

  • MD5

    502110f389aa33faaa0721f04e8aee77

  • SHA1

    1328faa34c2bb6fa9ee163d325effb28eb4dc7c0

  • SHA256

    6f66ae53f3644b91d4e532d34c49e3b496c0e5275672bd80af296ac01577794d

  • SHA512

    642e189e7d345e4989f250d8fa472c48b839ca748357b4632a7a0cfe270a48ea94100e3ec4a5a21c002119ebeb51482cc456770b36c5e3ebd4784004e8249839

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6f66ae53f3644b91d4e532d34c49e3b496c0e5275672bd80af296ac01577794d

    • Size

      297KB

    • MD5

      502110f389aa33faaa0721f04e8aee77

    • SHA1

      1328faa34c2bb6fa9ee163d325effb28eb4dc7c0

    • SHA256

      6f66ae53f3644b91d4e532d34c49e3b496c0e5275672bd80af296ac01577794d

    • SHA512

      642e189e7d345e4989f250d8fa472c48b839ca748357b4632a7a0cfe270a48ea94100e3ec4a5a21c002119ebeb51482cc456770b36c5e3ebd4784004e8249839

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks