General

  • Target

    323d4ceb737997b06d9e522630f9d036ad4b1addcb2bb3e2aa76d29e591be72f

  • Size

    442KB

  • Sample

    241105-l3abjaygna

  • MD5

    b0c194c979bd54e4bb2b2c2e14fdd8e8

  • SHA1

    6cce39926b7398b8684ea406fcbdbb39eaeea5aa

  • SHA256

    323d4ceb737997b06d9e522630f9d036ad4b1addcb2bb3e2aa76d29e591be72f

  • SHA512

    af835fcfe29bb0ffeb4d15a5bff3f1f98fbad6e48fb6783f7fe23681ea627165a300ab9d4021a93d00b870f4878fcfa0066980ecd0b32efca88377260f0a26a4

  • SSDEEP

    6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      323d4ceb737997b06d9e522630f9d036ad4b1addcb2bb3e2aa76d29e591be72f

    • Size

      442KB

    • MD5

      b0c194c979bd54e4bb2b2c2e14fdd8e8

    • SHA1

      6cce39926b7398b8684ea406fcbdbb39eaeea5aa

    • SHA256

      323d4ceb737997b06d9e522630f9d036ad4b1addcb2bb3e2aa76d29e591be72f

    • SHA512

      af835fcfe29bb0ffeb4d15a5bff3f1f98fbad6e48fb6783f7fe23681ea627165a300ab9d4021a93d00b870f4878fcfa0066980ecd0b32efca88377260f0a26a4

    • SSDEEP

      6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks