General

  • Target

    1ed87c6081689729957bb632c1c54312b0d014ff9d2d3169a78f50385e98b42b

  • Size

    442KB

  • Sample

    241105-w6t58axarn

  • MD5

    d8cfdb3c91ba6894bf5c503ed6a05e52

  • SHA1

    0ebd13f5c8c17ba36b3ea61341fbc87c3d85d788

  • SHA256

    1ed87c6081689729957bb632c1c54312b0d014ff9d2d3169a78f50385e98b42b

  • SHA512

    e6f54aa87c25646fe98c98830c8b3c928c4f33b7a7dbd52d4085437fa00e5c71fe6c4f04d3a6d7e64bad2263bbc04095b26514c23600d6c75ef1a932fe8949bf

  • SSDEEP

    6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      1ed87c6081689729957bb632c1c54312b0d014ff9d2d3169a78f50385e98b42b

    • Size

      442KB

    • MD5

      d8cfdb3c91ba6894bf5c503ed6a05e52

    • SHA1

      0ebd13f5c8c17ba36b3ea61341fbc87c3d85d788

    • SHA256

      1ed87c6081689729957bb632c1c54312b0d014ff9d2d3169a78f50385e98b42b

    • SHA512

      e6f54aa87c25646fe98c98830c8b3c928c4f33b7a7dbd52d4085437fa00e5c71fe6c4f04d3a6d7e64bad2263bbc04095b26514c23600d6c75ef1a932fe8949bf

    • SSDEEP

      6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks