General

  • Target

    f58f27ef6ceb77ddfc8385553e9fba1eb74bfc0ee40a8a970ffd7584d3c3166b

  • Size

    423KB

  • Sample

    241104-zsvrdaxckb

  • MD5

    979110a92bf9f9bd124d9a892b081935

  • SHA1

    f1a8a380ce43433706bfbdc308c0e56d22eff4e2

  • SHA256

    f58f27ef6ceb77ddfc8385553e9fba1eb74bfc0ee40a8a970ffd7584d3c3166b

  • SHA512

    bfc62a59cfb259a191bbfd388c06a691be4d3ee63db9547be3a8d6288e65997514f3f5087224072bf4dda62b474929498eb1a031f5a60cdcaa4b1e2cabe11605

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f58f27ef6ceb77ddfc8385553e9fba1eb74bfc0ee40a8a970ffd7584d3c3166b

    • Size

      423KB

    • MD5

      979110a92bf9f9bd124d9a892b081935

    • SHA1

      f1a8a380ce43433706bfbdc308c0e56d22eff4e2

    • SHA256

      f58f27ef6ceb77ddfc8385553e9fba1eb74bfc0ee40a8a970ffd7584d3c3166b

    • SHA512

      bfc62a59cfb259a191bbfd388c06a691be4d3ee63db9547be3a8d6288e65997514f3f5087224072bf4dda62b474929498eb1a031f5a60cdcaa4b1e2cabe11605

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks