General

  • Target

    90c4d6eeeefbb074230723dc985490082cf71c856c1b31edd29f2c0d695ba4b6

  • Size

    423KB

  • Sample

    241106-3d8lgazgjg

  • MD5

    714113f6e571600150d318f4f50020d8

  • SHA1

    25790271c870d2fe14f44f9dbbe59f2eb4d683cc

  • SHA256

    90c4d6eeeefbb074230723dc985490082cf71c856c1b31edd29f2c0d695ba4b6

  • SHA512

    48f69ae0328bf0985dc330d6e319b21d253c7061d26ab4a6b77568b7519efa0a28b3b7480aaaecdd6f849453b7d6dd15c70008cd51618418bcdba66e4b59ed64

  • SSDEEP

    6144:cMui5ObVmy+0LExccD4HOCL+qzPI1vCyuKkYi82Jzj6efYPV0p:GrLExjiOCyqzPI1vCyuKkBJzjL

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      90c4d6eeeefbb074230723dc985490082cf71c856c1b31edd29f2c0d695ba4b6

    • Size

      423KB

    • MD5

      714113f6e571600150d318f4f50020d8

    • SHA1

      25790271c870d2fe14f44f9dbbe59f2eb4d683cc

    • SHA256

      90c4d6eeeefbb074230723dc985490082cf71c856c1b31edd29f2c0d695ba4b6

    • SHA512

      48f69ae0328bf0985dc330d6e319b21d253c7061d26ab4a6b77568b7519efa0a28b3b7480aaaecdd6f849453b7d6dd15c70008cd51618418bcdba66e4b59ed64

    • SSDEEP

      6144:cMui5ObVmy+0LExccD4HOCL+qzPI1vCyuKkYi82Jzj6efYPV0p:GrLExjiOCyqzPI1vCyuKkBJzjL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks