General

  • Target

    679d574f3ca3c8c37f8e87085251f5b98c14cfc684d92762e0d2de7f7742e91f

  • Size

    297KB

  • Sample

    241105-kyvw1aygnj

  • MD5

    6e65c7331baabf086467990713c5b646

  • SHA1

    7b19d3126689c173107c630e86cf4baefa4cba74

  • SHA256

    679d574f3ca3c8c37f8e87085251f5b98c14cfc684d92762e0d2de7f7742e91f

  • SHA512

    166507382b290455e817e85bb0d5febb335af647722dc9cd11f88fc5790d24d3f6a12df88acb8b34d676278af1cfea3214689dc07d05f4e34caffb8f4a26e89e

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      679d574f3ca3c8c37f8e87085251f5b98c14cfc684d92762e0d2de7f7742e91f

    • Size

      297KB

    • MD5

      6e65c7331baabf086467990713c5b646

    • SHA1

      7b19d3126689c173107c630e86cf4baefa4cba74

    • SHA256

      679d574f3ca3c8c37f8e87085251f5b98c14cfc684d92762e0d2de7f7742e91f

    • SHA512

      166507382b290455e817e85bb0d5febb335af647722dc9cd11f88fc5790d24d3f6a12df88acb8b34d676278af1cfea3214689dc07d05f4e34caffb8f4a26e89e

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks