General

  • Target

    94557a11c1c107946194f900c9903cf338f34241d971cbc735bc434c9b5a14d9

  • Size

    371KB

  • Sample

    241105-ss7bvavajk

  • MD5

    5eb8f6ac652e81e0576666ebfa25b670

  • SHA1

    5ad098c81cd42e6e82fd05aa29b05b0cc9b0f5bb

  • SHA256

    94557a11c1c107946194f900c9903cf338f34241d971cbc735bc434c9b5a14d9

  • SHA512

    6683ea222079b0679bcf1324da77c1337c8f9ea75ad34e90a1491a2c815b7d860331dcbe41f73d0aead78ad27e3d71cb093536b146d72d2d8a7b7b906ab6791e

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      94557a11c1c107946194f900c9903cf338f34241d971cbc735bc434c9b5a14d9

    • Size

      371KB

    • MD5

      5eb8f6ac652e81e0576666ebfa25b670

    • SHA1

      5ad098c81cd42e6e82fd05aa29b05b0cc9b0f5bb

    • SHA256

      94557a11c1c107946194f900c9903cf338f34241d971cbc735bc434c9b5a14d9

    • SHA512

      6683ea222079b0679bcf1324da77c1337c8f9ea75ad34e90a1491a2c815b7d860331dcbe41f73d0aead78ad27e3d71cb093536b146d72d2d8a7b7b906ab6791e

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks