General

  • Target

    d1cdd3b4e8ad2aafcdf3331025a8fa4d8322a1955f4f654e5ae6de2e1949621f

  • Size

    371KB

  • Sample

    241106-2eqxdaylby

  • MD5

    2d384664cec116e239d76a1ca2f2e65a

  • SHA1

    fd645ae5e057a2b0eec5b59830cc4bc6a14b3f8e

  • SHA256

    d1cdd3b4e8ad2aafcdf3331025a8fa4d8322a1955f4f654e5ae6de2e1949621f

  • SHA512

    4b2902b0706773c68a5da142b1d7841bcce8e8e3d7c015e02f0166b3a0af31733f1d46eb108b27528d3364bfeb1b9b34ce16ba7f5fe1bc43b9190e9a622a8bac

  • SSDEEP

    6144:OCXITG+urF+W2/cH8J6yr/bAxgPLrk1sx5b7ITsqXigaXwVfZ:OCXITDDWmx6BOj8O17R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d1cdd3b4e8ad2aafcdf3331025a8fa4d8322a1955f4f654e5ae6de2e1949621f

    • Size

      371KB

    • MD5

      2d384664cec116e239d76a1ca2f2e65a

    • SHA1

      fd645ae5e057a2b0eec5b59830cc4bc6a14b3f8e

    • SHA256

      d1cdd3b4e8ad2aafcdf3331025a8fa4d8322a1955f4f654e5ae6de2e1949621f

    • SHA512

      4b2902b0706773c68a5da142b1d7841bcce8e8e3d7c015e02f0166b3a0af31733f1d46eb108b27528d3364bfeb1b9b34ce16ba7f5fe1bc43b9190e9a622a8bac

    • SSDEEP

      6144:OCXITG+urF+W2/cH8J6yr/bAxgPLrk1sx5b7ITsqXigaXwVfZ:OCXITDDWmx6BOj8O17R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks