General

  • Target

    1903a5d757b1712f417f0c2c8c9493e6a22c161c618647e2a9395661884ab40c

  • Size

    346KB

  • Sample

    241105-n3deaszmct

  • MD5

    760ee0ea376df5e21573eb08c34abf1b

  • SHA1

    305948e38b178908cd6a0d704cc9135931789c13

  • SHA256

    1903a5d757b1712f417f0c2c8c9493e6a22c161c618647e2a9395661884ab40c

  • SHA512

    1c1787bb3446c001a204ccf8c27a03b81c72b7da5d8fb44ce5d0353c4b30b73dfc72a417c21bdcb7ba035810467816953fcf029e0d4b7d1b1f1296374b4de833

  • SSDEEP

    6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      1903a5d757b1712f417f0c2c8c9493e6a22c161c618647e2a9395661884ab40c

    • Size

      346KB

    • MD5

      760ee0ea376df5e21573eb08c34abf1b

    • SHA1

      305948e38b178908cd6a0d704cc9135931789c13

    • SHA256

      1903a5d757b1712f417f0c2c8c9493e6a22c161c618647e2a9395661884ab40c

    • SHA512

      1c1787bb3446c001a204ccf8c27a03b81c72b7da5d8fb44ce5d0353c4b30b73dfc72a417c21bdcb7ba035810467816953fcf029e0d4b7d1b1f1296374b4de833

    • SSDEEP

      6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks