General

  • Target

    2d6091cda8553b6b56e9b467fe8e2b6bb6825325fea3866403fc3854978af20f

  • Size

    371KB

  • Sample

    241105-nmhzvazkey

  • MD5

    b9784446e28401b99625c1fce238f06c

  • SHA1

    32c033b8822d1490b7a59a939b974848a80266af

  • SHA256

    2d6091cda8553b6b56e9b467fe8e2b6bb6825325fea3866403fc3854978af20f

  • SHA512

    456841b057f8e95aecf8da845108095313145cbcecaa58661c4dd36f5142d23ce5f0c32954cc600f696ac527069a7f96dad953bfe940f0c3b3ff0ceef5152150

  • SSDEEP

    6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2d6091cda8553b6b56e9b467fe8e2b6bb6825325fea3866403fc3854978af20f

    • Size

      371KB

    • MD5

      b9784446e28401b99625c1fce238f06c

    • SHA1

      32c033b8822d1490b7a59a939b974848a80266af

    • SHA256

      2d6091cda8553b6b56e9b467fe8e2b6bb6825325fea3866403fc3854978af20f

    • SHA512

      456841b057f8e95aecf8da845108095313145cbcecaa58661c4dd36f5142d23ce5f0c32954cc600f696ac527069a7f96dad953bfe940f0c3b3ff0ceef5152150

    • SSDEEP

      6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks