General

  • Target

    220abe2d1ba6b17664074dc40bcce4da319d8495d599bbc978d4b0324f3ef15a

  • Size

    427KB

  • Sample

    241104-w431cavcrg

  • MD5

    1f13aecb010c1a404917b8f67197ec4a

  • SHA1

    58cfb76e3895fa56bf0b53ac8ebbb3a1cfc56099

  • SHA256

    220abe2d1ba6b17664074dc40bcce4da319d8495d599bbc978d4b0324f3ef15a

  • SHA512

    b429d283d1bf542b37a3341c5e5400dbbf8c6a3b78012fc92b25a12d8e6c87a3e626fb71ee0a6b44e6f2d358104b0ef4ebdbab68f45caed4b7caaeae9d77baf2

  • SSDEEP

    6144:XxnVbTjtyULhQVfiYUbqBAXdfWe22Yi5/L/ngOBWJfr1PqaRJ0:XxVbsgcinqBAXNT22Yi5/L/n6r1Pq

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      220abe2d1ba6b17664074dc40bcce4da319d8495d599bbc978d4b0324f3ef15a

    • Size

      427KB

    • MD5

      1f13aecb010c1a404917b8f67197ec4a

    • SHA1

      58cfb76e3895fa56bf0b53ac8ebbb3a1cfc56099

    • SHA256

      220abe2d1ba6b17664074dc40bcce4da319d8495d599bbc978d4b0324f3ef15a

    • SHA512

      b429d283d1bf542b37a3341c5e5400dbbf8c6a3b78012fc92b25a12d8e6c87a3e626fb71ee0a6b44e6f2d358104b0ef4ebdbab68f45caed4b7caaeae9d77baf2

    • SSDEEP

      6144:XxnVbTjtyULhQVfiYUbqBAXdfWe22Yi5/L/ngOBWJfr1PqaRJ0:XxVbsgcinqBAXNT22Yi5/L/n6r1Pq

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks