General

  • Target

    ce285bc434b1aa60af706892a85b0208ac71f5bd775374b386f3351c134f8976

  • Size

    371KB

  • Sample

    241105-p3gbmatnhn

  • MD5

    8b5366ac8fe9280b5522b5b656c4475b

  • SHA1

    486725dee17b4dbdba5f9ad044077f988155b06b

  • SHA256

    ce285bc434b1aa60af706892a85b0208ac71f5bd775374b386f3351c134f8976

  • SHA512

    9d5cb97f498bb3d287451989330d1be3e2ad7c06eb76ccac192c9576175771d596ba497f0b6e6192454ece412edc6c4d5912a08c96d84698d59cb4f94c21b914

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      ce285bc434b1aa60af706892a85b0208ac71f5bd775374b386f3351c134f8976

    • Size

      371KB

    • MD5

      8b5366ac8fe9280b5522b5b656c4475b

    • SHA1

      486725dee17b4dbdba5f9ad044077f988155b06b

    • SHA256

      ce285bc434b1aa60af706892a85b0208ac71f5bd775374b386f3351c134f8976

    • SHA512

      9d5cb97f498bb3d287451989330d1be3e2ad7c06eb76ccac192c9576175771d596ba497f0b6e6192454ece412edc6c4d5912a08c96d84698d59cb4f94c21b914

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks