General

  • Target

    6af5645ff193cc41abb726fb8d444f0b22481ddf7065999f55524d21960c08f8

  • Size

    297KB

  • Sample

    241105-kdfataydql

  • MD5

    d7139b14383e3922ef72e74a7af44fca

  • SHA1

    1287d26e629fdb847a2c93fdabb5cf3511f37829

  • SHA256

    6af5645ff193cc41abb726fb8d444f0b22481ddf7065999f55524d21960c08f8

  • SHA512

    874092948bd2eb55296cb8fc7dae4e24b5d63f9881a100ae89b71cb5755bec44e4faf48274e4ce1c72529046f8007c36285700b5bbebe8f96d839b4626b4fdd2

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6af5645ff193cc41abb726fb8d444f0b22481ddf7065999f55524d21960c08f8

    • Size

      297KB

    • MD5

      d7139b14383e3922ef72e74a7af44fca

    • SHA1

      1287d26e629fdb847a2c93fdabb5cf3511f37829

    • SHA256

      6af5645ff193cc41abb726fb8d444f0b22481ddf7065999f55524d21960c08f8

    • SHA512

      874092948bd2eb55296cb8fc7dae4e24b5d63f9881a100ae89b71cb5755bec44e4faf48274e4ce1c72529046f8007c36285700b5bbebe8f96d839b4626b4fdd2

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks