General

  • Target

    26a4e2581306d83c550d7ce45a63f1fa0225ff459e4535302c60e6abfa2a3f58

  • Size

    297KB

  • Sample

    241105-ylal7awrbt

  • MD5

    2a88978351b56c8e97499e456c40a453

  • SHA1

    92835eaf74eaec03ec76a05ee26c7617d3717291

  • SHA256

    26a4e2581306d83c550d7ce45a63f1fa0225ff459e4535302c60e6abfa2a3f58

  • SHA512

    b43c12e89eabc2817d49b4ad9769414b481868223ea53196ac41490e8a6ce9bfb0292ab4b5c7f25f640d10588b416b60a7e2a375eb30bd888feb2d826bed1bee

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      26a4e2581306d83c550d7ce45a63f1fa0225ff459e4535302c60e6abfa2a3f58

    • Size

      297KB

    • MD5

      2a88978351b56c8e97499e456c40a453

    • SHA1

      92835eaf74eaec03ec76a05ee26c7617d3717291

    • SHA256

      26a4e2581306d83c550d7ce45a63f1fa0225ff459e4535302c60e6abfa2a3f58

    • SHA512

      b43c12e89eabc2817d49b4ad9769414b481868223ea53196ac41490e8a6ce9bfb0292ab4b5c7f25f640d10588b416b60a7e2a375eb30bd888feb2d826bed1bee

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks