General

  • Target

    6891bb6a044bc56b5b56d7dbc4a8acceefedd9f73dc3a3092f050b2ce04510f3

  • Size

    383KB

  • Sample

    241105-zzswcsycqh

  • MD5

    5c5e2515d39100fd2e0e1024b2929e99

  • SHA1

    b5ee481f544e9b406e811cd5c2b2d84cfdd9ecd7

  • SHA256

    6891bb6a044bc56b5b56d7dbc4a8acceefedd9f73dc3a3092f050b2ce04510f3

  • SHA512

    3d6468069ba1a09d0265142d52334063e08e21af1255ad0de3678676e5639d86c3d6ebdc141cd42e889d6e834be1f4d541c3e121ba0a2cdcb517bb431d3896db

  • SSDEEP

    6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6891bb6a044bc56b5b56d7dbc4a8acceefedd9f73dc3a3092f050b2ce04510f3

    • Size

      383KB

    • MD5

      5c5e2515d39100fd2e0e1024b2929e99

    • SHA1

      b5ee481f544e9b406e811cd5c2b2d84cfdd9ecd7

    • SHA256

      6891bb6a044bc56b5b56d7dbc4a8acceefedd9f73dc3a3092f050b2ce04510f3

    • SHA512

      3d6468069ba1a09d0265142d52334063e08e21af1255ad0de3678676e5639d86c3d6ebdc141cd42e889d6e834be1f4d541c3e121ba0a2cdcb517bb431d3896db

    • SSDEEP

      6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks