General

  • Target

    640a1c199028dd8148e2fa5210e8746303c2acfeae50bdcc292135e7651e8a00

  • Size

    423KB

  • Sample

    241104-snyh5ssdnl

  • MD5

    c1672a083060c28ba10876bfaaa50498

  • SHA1

    511b6c0e7ed4a86d1e8a7ed97f207fb2590baaaf

  • SHA256

    640a1c199028dd8148e2fa5210e8746303c2acfeae50bdcc292135e7651e8a00

  • SHA512

    66a75584507e1b9e25e76d12a8803850668fea5ce71f0fb71e14253173584322f13468f0b225782b45d6226270a92bf6ea97db42d8cb7bbd8ac1b3060fea661c

  • SSDEEP

    6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      640a1c199028dd8148e2fa5210e8746303c2acfeae50bdcc292135e7651e8a00

    • Size

      423KB

    • MD5

      c1672a083060c28ba10876bfaaa50498

    • SHA1

      511b6c0e7ed4a86d1e8a7ed97f207fb2590baaaf

    • SHA256

      640a1c199028dd8148e2fa5210e8746303c2acfeae50bdcc292135e7651e8a00

    • SHA512

      66a75584507e1b9e25e76d12a8803850668fea5ce71f0fb71e14253173584322f13468f0b225782b45d6226270a92bf6ea97db42d8cb7bbd8ac1b3060fea661c

    • SSDEEP

      6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks