General

  • Target

    a4d46b1471e143c7b9f44b7cf3e070ff1bf2ff1912016228c7554d03abd46853

  • Size

    297KB

  • Sample

    241105-c12hkasere

  • MD5

    b5add60f1a6a29dae5d75d62a20725c5

  • SHA1

    6e379664f5cc00ff0abb5882bad3ed1dc7362920

  • SHA256

    a4d46b1471e143c7b9f44b7cf3e070ff1bf2ff1912016228c7554d03abd46853

  • SHA512

    ae39001cc919d468e34b04580fe8acd4fa12d7d1ee86e8b822822fb136a5a889ed0783e9d535b24576a6e6ed7d3e61987e7a928a3e60640d8696db6f20efe795

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a4d46b1471e143c7b9f44b7cf3e070ff1bf2ff1912016228c7554d03abd46853

    • Size

      297KB

    • MD5

      b5add60f1a6a29dae5d75d62a20725c5

    • SHA1

      6e379664f5cc00ff0abb5882bad3ed1dc7362920

    • SHA256

      a4d46b1471e143c7b9f44b7cf3e070ff1bf2ff1912016228c7554d03abd46853

    • SHA512

      ae39001cc919d468e34b04580fe8acd4fa12d7d1ee86e8b822822fb136a5a889ed0783e9d535b24576a6e6ed7d3e61987e7a928a3e60640d8696db6f20efe795

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks