General

  • Target

    bc491b60c70c2d942a4c02fa3766c03c8eb3668984f45e28cd765f5b6433423a

  • Size

    371KB

  • Sample

    241105-k9rnqaxqaw

  • MD5

    19e5e53c36f251478a016ec88fe99bca

  • SHA1

    8c6050bd9ac19e824454f8a433fc2e69df201e6c

  • SHA256

    bc491b60c70c2d942a4c02fa3766c03c8eb3668984f45e28cd765f5b6433423a

  • SHA512

    80aa1abff7380401b8e2b122da921cfe29861aca7241efa77b4450f4c68cc87a5beb72c94cffce1d329cad9faa34e422d80885faec5bd5c9bf256ef5fc5626dc

  • SSDEEP

    6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      bc491b60c70c2d942a4c02fa3766c03c8eb3668984f45e28cd765f5b6433423a

    • Size

      371KB

    • MD5

      19e5e53c36f251478a016ec88fe99bca

    • SHA1

      8c6050bd9ac19e824454f8a433fc2e69df201e6c

    • SHA256

      bc491b60c70c2d942a4c02fa3766c03c8eb3668984f45e28cd765f5b6433423a

    • SHA512

      80aa1abff7380401b8e2b122da921cfe29861aca7241efa77b4450f4c68cc87a5beb72c94cffce1d329cad9faa34e422d80885faec5bd5c9bf256ef5fc5626dc

    • SSDEEP

      6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks