General

  • Target

    1c409c0df27f2b26f9810fd92640276ed27beb7179482e865534294f4d6ac7a3

  • Size

    371KB

  • Sample

    241106-y6q5nsxgkn

  • MD5

    ff704e223f13b0b67caeb6debb89db24

  • SHA1

    1389a2cea948a4fee1144e54e4967da6a9d418ff

  • SHA256

    1c409c0df27f2b26f9810fd92640276ed27beb7179482e865534294f4d6ac7a3

  • SHA512

    7a4deaaa25451d247b665c9177714fdb1c2e5a1d3aa550a0688e9be4242d0936543defeb77ffef2c980cee7af80317453013c346b1832a92198b8d5844d72721

  • SSDEEP

    6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      1c409c0df27f2b26f9810fd92640276ed27beb7179482e865534294f4d6ac7a3

    • Size

      371KB

    • MD5

      ff704e223f13b0b67caeb6debb89db24

    • SHA1

      1389a2cea948a4fee1144e54e4967da6a9d418ff

    • SHA256

      1c409c0df27f2b26f9810fd92640276ed27beb7179482e865534294f4d6ac7a3

    • SHA512

      7a4deaaa25451d247b665c9177714fdb1c2e5a1d3aa550a0688e9be4242d0936543defeb77ffef2c980cee7af80317453013c346b1832a92198b8d5844d72721

    • SSDEEP

      6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks