General

  • Target

    23548f60211f3c23e7ee4868fd5984bdf4aa25ff942c2a1c2b0ac206c21eaaf3

  • Size

    394KB

  • Sample

    241105-dn9tvatarb

  • MD5

    73299eee530468c3d04a6385513cc21d

  • SHA1

    85ecec69a19cbf2189d03e5b748f08d521f46f10

  • SHA256

    23548f60211f3c23e7ee4868fd5984bdf4aa25ff942c2a1c2b0ac206c21eaaf3

  • SHA512

    25d2431d680e50c1b5ea86f3ccef8fd9aef54e1a244f9fb8f6aa9b21b55eaa429fec6019f64c15182fa67cf73930cfbb75b3b0937798709bc7c5bc597ecca1bb

  • SSDEEP

    6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      23548f60211f3c23e7ee4868fd5984bdf4aa25ff942c2a1c2b0ac206c21eaaf3

    • Size

      394KB

    • MD5

      73299eee530468c3d04a6385513cc21d

    • SHA1

      85ecec69a19cbf2189d03e5b748f08d521f46f10

    • SHA256

      23548f60211f3c23e7ee4868fd5984bdf4aa25ff942c2a1c2b0ac206c21eaaf3

    • SHA512

      25d2431d680e50c1b5ea86f3ccef8fd9aef54e1a244f9fb8f6aa9b21b55eaa429fec6019f64c15182fa67cf73930cfbb75b3b0937798709bc7c5bc597ecca1bb

    • SSDEEP

      6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks