General

  • Target

    08cddf1d75e9d20554b470691c5cdeb055d1354e183ad3be5bdf8bb18a1f13e6

  • Size

    442KB

  • Sample

    241105-vtkkksvele

  • MD5

    08723c40933b55241d686843f84c3447

  • SHA1

    874867e62a0f1ce70550f6944f4e8db66f645a61

  • SHA256

    08cddf1d75e9d20554b470691c5cdeb055d1354e183ad3be5bdf8bb18a1f13e6

  • SHA512

    2ec0feb148b7932691bf82af5240b00205d712d1484568e4b22ee154865cbdc0f2d9a05d9a3990b7c39697f0c59eda99b9d362e69d885ce54e3dbde34ae669ec

  • SSDEEP

    6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      08cddf1d75e9d20554b470691c5cdeb055d1354e183ad3be5bdf8bb18a1f13e6

    • Size

      442KB

    • MD5

      08723c40933b55241d686843f84c3447

    • SHA1

      874867e62a0f1ce70550f6944f4e8db66f645a61

    • SHA256

      08cddf1d75e9d20554b470691c5cdeb055d1354e183ad3be5bdf8bb18a1f13e6

    • SHA512

      2ec0feb148b7932691bf82af5240b00205d712d1484568e4b22ee154865cbdc0f2d9a05d9a3990b7c39697f0c59eda99b9d362e69d885ce54e3dbde34ae669ec

    • SSDEEP

      6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks