General

  • Target

    a6db9ee748c1495dfc6198f82585a4f049643475a62ad4c0b8c8beeedf422955

  • Size

    298KB

  • Sample

    241106-3haj8szgqb

  • MD5

    1d99b48ee2164a2c953854212f7feb48

  • SHA1

    830cfe3644358263feff048868f1e4aa83874f4c

  • SHA256

    a6db9ee748c1495dfc6198f82585a4f049643475a62ad4c0b8c8beeedf422955

  • SHA512

    019ade5b803ace815e7454f796c7298e9f438fd8ef18f0b167932a9dcde672e852e20a1f7889ca7b9128299e45bc58d94b0f12f12056825851e121b30c3035b5

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a6db9ee748c1495dfc6198f82585a4f049643475a62ad4c0b8c8beeedf422955

    • Size

      298KB

    • MD5

      1d99b48ee2164a2c953854212f7feb48

    • SHA1

      830cfe3644358263feff048868f1e4aa83874f4c

    • SHA256

      a6db9ee748c1495dfc6198f82585a4f049643475a62ad4c0b8c8beeedf422955

    • SHA512

      019ade5b803ace815e7454f796c7298e9f438fd8ef18f0b167932a9dcde672e852e20a1f7889ca7b9128299e45bc58d94b0f12f12056825851e121b30c3035b5

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks