General

  • Target

    d1c8a30614d8e867e69e68b45af0d1074a50d2bb5f073f60b34a44577abf6738

  • Size

    422KB

  • Sample

    241107-nyqh3a1hka

  • MD5

    2a0cb4fda3139563628ffd8e95d1698c

  • SHA1

    2b4f7d82b5451d29331b83363f9179d23d9e1138

  • SHA256

    d1c8a30614d8e867e69e68b45af0d1074a50d2bb5f073f60b34a44577abf6738

  • SHA512

    a0830aa276321ae24efe18b1d2c04d308e566dda93b42a608bfe61b85d653f27b56d636e041012f49333ce42513aec7ebb0154baf8aeff8c70ba09ac032c0451

  • SSDEEP

    12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d1c8a30614d8e867e69e68b45af0d1074a50d2bb5f073f60b34a44577abf6738

    • Size

      422KB

    • MD5

      2a0cb4fda3139563628ffd8e95d1698c

    • SHA1

      2b4f7d82b5451d29331b83363f9179d23d9e1138

    • SHA256

      d1c8a30614d8e867e69e68b45af0d1074a50d2bb5f073f60b34a44577abf6738

    • SHA512

      a0830aa276321ae24efe18b1d2c04d308e566dda93b42a608bfe61b85d653f27b56d636e041012f49333ce42513aec7ebb0154baf8aeff8c70ba09ac032c0451

    • SSDEEP

      12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks