General

  • Target

    d4b49d668e431ea7bf4dee8c37351789c8c0d78e7429a657f4b9dcbf379e2e19

  • Size

    297KB

  • Sample

    241105-q2qz4svkeq

  • MD5

    6222bc3c62c442eaee0a529ea25c48f0

  • SHA1

    7dfb2c0a2c711a71370db1952f56ae37677e2df4

  • SHA256

    d4b49d668e431ea7bf4dee8c37351789c8c0d78e7429a657f4b9dcbf379e2e19

  • SHA512

    041f606f12167105a75f709fd03b18b468ababbe04d45a8dd6c9869782f0f8129803fdce23691ba327fa2b3f7ba7e0cda1d167a85673841f55ba8455fbef6516

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d4b49d668e431ea7bf4dee8c37351789c8c0d78e7429a657f4b9dcbf379e2e19

    • Size

      297KB

    • MD5

      6222bc3c62c442eaee0a529ea25c48f0

    • SHA1

      7dfb2c0a2c711a71370db1952f56ae37677e2df4

    • SHA256

      d4b49d668e431ea7bf4dee8c37351789c8c0d78e7429a657f4b9dcbf379e2e19

    • SHA512

      041f606f12167105a75f709fd03b18b468ababbe04d45a8dd6c9869782f0f8129803fdce23691ba327fa2b3f7ba7e0cda1d167a85673841f55ba8455fbef6516

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks