General

  • Target

    b8442c0bb6388dcb9898439e526ce3129b32de18f0affd29196285a53b5df44d

  • Size

    423KB

  • Sample

    241106-2sm3msyncv

  • MD5

    d4562a3dddbb1ee27f56e3e1a668e7f7

  • SHA1

    d995a7a6acc4162b258b807e1e9ff8f6901e3eae

  • SHA256

    b8442c0bb6388dcb9898439e526ce3129b32de18f0affd29196285a53b5df44d

  • SHA512

    30b1bcf6dfd52a311416d4d7ac9fbb2a8ef9a49adf4912a515af7ece35131b29de29d3dd8e831c1ae2a35deae636dda3369db10c45b37608e8e86ad8029b073c

  • SSDEEP

    6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      b8442c0bb6388dcb9898439e526ce3129b32de18f0affd29196285a53b5df44d

    • Size

      423KB

    • MD5

      d4562a3dddbb1ee27f56e3e1a668e7f7

    • SHA1

      d995a7a6acc4162b258b807e1e9ff8f6901e3eae

    • SHA256

      b8442c0bb6388dcb9898439e526ce3129b32de18f0affd29196285a53b5df44d

    • SHA512

      30b1bcf6dfd52a311416d4d7ac9fbb2a8ef9a49adf4912a515af7ece35131b29de29d3dd8e831c1ae2a35deae636dda3369db10c45b37608e8e86ad8029b073c

    • SSDEEP

      6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks