General

  • Target

    3762f155857ff60e9b1b9ad59cc7419f3f2091d777ba2289c03bd12af5146f80

  • Size

    422KB

  • Sample

    241105-wry6mawbkd

  • MD5

    6e661930de7b22d26a6dda1507af989a

  • SHA1

    628d7af312b34a41c3121187dda8011234d411cd

  • SHA256

    3762f155857ff60e9b1b9ad59cc7419f3f2091d777ba2289c03bd12af5146f80

  • SHA512

    3250305502fc446a3d0c67300b674aa5c431fc4f52fd043a6d8234b3d84b8a9f0b6ce51acc6aae6c413832b8add089da38a63f3659307d3d8da4800d990ac939

  • SSDEEP

    12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      3762f155857ff60e9b1b9ad59cc7419f3f2091d777ba2289c03bd12af5146f80

    • Size

      422KB

    • MD5

      6e661930de7b22d26a6dda1507af989a

    • SHA1

      628d7af312b34a41c3121187dda8011234d411cd

    • SHA256

      3762f155857ff60e9b1b9ad59cc7419f3f2091d777ba2289c03bd12af5146f80

    • SHA512

      3250305502fc446a3d0c67300b674aa5c431fc4f52fd043a6d8234b3d84b8a9f0b6ce51acc6aae6c413832b8add089da38a63f3659307d3d8da4800d990ac939

    • SSDEEP

      12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks