General

  • Target

    6369bce5cdba3458c6a17ca4da9612452ab4fd200522b838d0e4997282d791b8

  • Size

    438KB

  • Sample

    241106-nqnz9s1rem

  • MD5

    768df55ba0b245f23ccf591c19481149

  • SHA1

    094e0e3d7b3a306bd02ae1a882a6301e2fef6c03

  • SHA256

    6369bce5cdba3458c6a17ca4da9612452ab4fd200522b838d0e4997282d791b8

  • SHA512

    844fa33f7a3b0108a8af4ef30f3ad819c069ba5aeca166b2464dac35e9702fd878f58a7f03028e1aba073374dae0e0b583fb3918c0043cb7cfc361bf3eb97309

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6369bce5cdba3458c6a17ca4da9612452ab4fd200522b838d0e4997282d791b8

    • Size

      438KB

    • MD5

      768df55ba0b245f23ccf591c19481149

    • SHA1

      094e0e3d7b3a306bd02ae1a882a6301e2fef6c03

    • SHA256

      6369bce5cdba3458c6a17ca4da9612452ab4fd200522b838d0e4997282d791b8

    • SHA512

      844fa33f7a3b0108a8af4ef30f3ad819c069ba5aeca166b2464dac35e9702fd878f58a7f03028e1aba073374dae0e0b583fb3918c0043cb7cfc361bf3eb97309

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks