General

  • Target

    73d6205f27ba999a8f437d7ed1a331c96c55b186eb15384727ae2f4d85de5cbb

  • Size

    297KB

  • Sample

    241106-ybes6aymhr

  • MD5

    286161305a724ffba7d456239d472328

  • SHA1

    41af704c3235f3f9369ff609c3b02ecf1d8e3b9f

  • SHA256

    73d6205f27ba999a8f437d7ed1a331c96c55b186eb15384727ae2f4d85de5cbb

  • SHA512

    7337e86a20dd14b9f7b50e40a49d1bfb8df4b9046f969ad26a58084a1b4a048a2bae39d71ae20b4f3093d114c5525194d5a5702b2eaecd933e77c73c7fbe4017

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      73d6205f27ba999a8f437d7ed1a331c96c55b186eb15384727ae2f4d85de5cbb

    • Size

      297KB

    • MD5

      286161305a724ffba7d456239d472328

    • SHA1

      41af704c3235f3f9369ff609c3b02ecf1d8e3b9f

    • SHA256

      73d6205f27ba999a8f437d7ed1a331c96c55b186eb15384727ae2f4d85de5cbb

    • SHA512

      7337e86a20dd14b9f7b50e40a49d1bfb8df4b9046f969ad26a58084a1b4a048a2bae39d71ae20b4f3093d114c5525194d5a5702b2eaecd933e77c73c7fbe4017

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks