General

  • Target

    f35cd20b1378f2e6c75eae46032ffd3cc443d1573d93668c1e16813da449480a

  • Size

    346KB

  • Sample

    241106-ztdt9axgkb

  • MD5

    fe9811e0d6f6f10430c16e46e6076666

  • SHA1

    7c689c7b99ea45781a2c6024e26939afbf1c1437

  • SHA256

    f35cd20b1378f2e6c75eae46032ffd3cc443d1573d93668c1e16813da449480a

  • SHA512

    042df7812316d7fe142e235b1990af4ce5322110d429f719fd65d30261a7a5a09284ea2266f7964929555f78b6468e55f06608a874bec6493a03c1687585df26

  • SSDEEP

    6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f35cd20b1378f2e6c75eae46032ffd3cc443d1573d93668c1e16813da449480a

    • Size

      346KB

    • MD5

      fe9811e0d6f6f10430c16e46e6076666

    • SHA1

      7c689c7b99ea45781a2c6024e26939afbf1c1437

    • SHA256

      f35cd20b1378f2e6c75eae46032ffd3cc443d1573d93668c1e16813da449480a

    • SHA512

      042df7812316d7fe142e235b1990af4ce5322110d429f719fd65d30261a7a5a09284ea2266f7964929555f78b6468e55f06608a874bec6493a03c1687585df26

    • SSDEEP

      6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks