General

  • Target

    c4427ffc33b79e53741816399556084192a4d47c13f9ad6638df4c9cc0d3f9f5

  • Size

    423KB

  • Sample

    241106-slem9atajm

  • MD5

    4769ffa87f70c7f527b9fab090a6c31b

  • SHA1

    1adf914f5288aa21e3968b27f9c86ea4334c9296

  • SHA256

    c4427ffc33b79e53741816399556084192a4d47c13f9ad6638df4c9cc0d3f9f5

  • SHA512

    a74ef92e4905f79350862def9643ff7c0e01405008f85f158a04b2a0c20093e2d69fce7997f6b15af231c4412c2f51b7051bf776360bf3f828c0b7d07f1cad15

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      c4427ffc33b79e53741816399556084192a4d47c13f9ad6638df4c9cc0d3f9f5

    • Size

      423KB

    • MD5

      4769ffa87f70c7f527b9fab090a6c31b

    • SHA1

      1adf914f5288aa21e3968b27f9c86ea4334c9296

    • SHA256

      c4427ffc33b79e53741816399556084192a4d47c13f9ad6638df4c9cc0d3f9f5

    • SHA512

      a74ef92e4905f79350862def9643ff7c0e01405008f85f158a04b2a0c20093e2d69fce7997f6b15af231c4412c2f51b7051bf776360bf3f828c0b7d07f1cad15

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks