General

  • Target

    792f932a3fac8acd7600c1460fbf0a0ef07ff4c8e112346d0c43f761a29659e8

  • Size

    297KB

  • Sample

    241106-mp69saxqcz

  • MD5

    160a536685e87e03a47ca719085ede91

  • SHA1

    a5c84c2f743c9c8301cccd9df819f4290bbc7c61

  • SHA256

    792f932a3fac8acd7600c1460fbf0a0ef07ff4c8e112346d0c43f761a29659e8

  • SHA512

    31d80bbfb8bcadd55e449df78610eaa467eba4d3d44b0f7a83434c18495c15d168596b517f3d2b4c7b5e79538603341c4c0097559d4fc0894ede6466ebf499d6

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      792f932a3fac8acd7600c1460fbf0a0ef07ff4c8e112346d0c43f761a29659e8

    • Size

      297KB

    • MD5

      160a536685e87e03a47ca719085ede91

    • SHA1

      a5c84c2f743c9c8301cccd9df819f4290bbc7c61

    • SHA256

      792f932a3fac8acd7600c1460fbf0a0ef07ff4c8e112346d0c43f761a29659e8

    • SHA512

      31d80bbfb8bcadd55e449df78610eaa467eba4d3d44b0f7a83434c18495c15d168596b517f3d2b4c7b5e79538603341c4c0097559d4fc0894ede6466ebf499d6

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks