General

  • Target

    a9b09c5e587a27a43620ba0481c04655eb70dcba5ee0abbfda018db946db453e

  • Size

    422KB

  • Sample

    241106-mk9jcaxpgy

  • MD5

    c205510bd1f73f0efdaf6dbed4d1d083

  • SHA1

    4ae075f7fc72bc1ed9623a4091de5d448bc4c178

  • SHA256

    a9b09c5e587a27a43620ba0481c04655eb70dcba5ee0abbfda018db946db453e

  • SHA512

    c6b8ac94f5799e975847742887986f3b9e7c2741af54c1b2ed4a6f79769e8a3710f6432f438945b700153513420a48628e08d38b08d8a43d45d33f6aade81d55

  • SSDEEP

    12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a9b09c5e587a27a43620ba0481c04655eb70dcba5ee0abbfda018db946db453e

    • Size

      422KB

    • MD5

      c205510bd1f73f0efdaf6dbed4d1d083

    • SHA1

      4ae075f7fc72bc1ed9623a4091de5d448bc4c178

    • SHA256

      a9b09c5e587a27a43620ba0481c04655eb70dcba5ee0abbfda018db946db453e

    • SHA512

      c6b8ac94f5799e975847742887986f3b9e7c2741af54c1b2ed4a6f79769e8a3710f6432f438945b700153513420a48628e08d38b08d8a43d45d33f6aade81d55

    • SSDEEP

      12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks