General

  • Target

    c93d7c16f17037931846971cd463d3d4c15fac10ac763389cc744ae062f9d86b

  • Size

    373KB

  • Sample

    241105-vsvddsveka

  • MD5

    d952abff8bec60a31ac7bd7de3c3a4a0

  • SHA1

    09df58bd624b79cee2cac051b4d2a66dbfba3baf

  • SHA256

    c93d7c16f17037931846971cd463d3d4c15fac10ac763389cc744ae062f9d86b

  • SHA512

    c292bd5163f1e0a4e45118de43d27ef52eaa5b4a90d47b918359218c7036396387a48f78256befdfdd3d0abc70cd90edc463428e5109e176df318c8cc2c1f6de

  • SSDEEP

    6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      c93d7c16f17037931846971cd463d3d4c15fac10ac763389cc744ae062f9d86b

    • Size

      373KB

    • MD5

      d952abff8bec60a31ac7bd7de3c3a4a0

    • SHA1

      09df58bd624b79cee2cac051b4d2a66dbfba3baf

    • SHA256

      c93d7c16f17037931846971cd463d3d4c15fac10ac763389cc744ae062f9d86b

    • SHA512

      c292bd5163f1e0a4e45118de43d27ef52eaa5b4a90d47b918359218c7036396387a48f78256befdfdd3d0abc70cd90edc463428e5109e176df318c8cc2c1f6de

    • SSDEEP

      6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks