General

  • Target

    6c1f9dfbdd8cad5f54665c6e792accbb8afb9277119b2b1aad2194ad0f69b799

  • Size

    423KB

  • Sample

    241106-nm9skazdpq

  • MD5

    e4c302fe685424753b98cce34acec1f5

  • SHA1

    124b6532cf562b0d1a08de5144638d7b486ebe12

  • SHA256

    6c1f9dfbdd8cad5f54665c6e792accbb8afb9277119b2b1aad2194ad0f69b799

  • SHA512

    0c38fbef6a42e8868bed84f45497894c99a2cef7ec66bf3efc585764683d34dfca9312a2fcd48fbbca74c76a2e42e494cbdbb4617f8d2b3576a38646407c9bb8

  • SSDEEP

    12288:u4rXu0OVUf2Au746adZtIzkNDtZuFM9bT6f+N:1lOG2tJ89tMUI+

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6c1f9dfbdd8cad5f54665c6e792accbb8afb9277119b2b1aad2194ad0f69b799

    • Size

      423KB

    • MD5

      e4c302fe685424753b98cce34acec1f5

    • SHA1

      124b6532cf562b0d1a08de5144638d7b486ebe12

    • SHA256

      6c1f9dfbdd8cad5f54665c6e792accbb8afb9277119b2b1aad2194ad0f69b799

    • SHA512

      0c38fbef6a42e8868bed84f45497894c99a2cef7ec66bf3efc585764683d34dfca9312a2fcd48fbbca74c76a2e42e494cbdbb4617f8d2b3576a38646407c9bb8

    • SSDEEP

      12288:u4rXu0OVUf2Au746adZtIzkNDtZuFM9bT6f+N:1lOG2tJ89tMUI+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks