General

  • Target

    626b929b0ce2a35820eb5fa3c1ae88cdb17a88e5aebf35e2c538be406890ade5

  • Size

    297KB

  • Sample

    241107-ratglatdkr

  • MD5

    f9e9b22570fe1ee3547c4ed3b1049cd7

  • SHA1

    4614e108d6940a0ad2f6627db1b2bc98ad8e7282

  • SHA256

    626b929b0ce2a35820eb5fa3c1ae88cdb17a88e5aebf35e2c538be406890ade5

  • SHA512

    63e588908fd415f1fb5a35a962cb2854e761a0741d02f9b8c461ac2eb97e30baaf748301d25fc7431ab3f2daac0461bdf672ef262034e9fce493cfeb0516f9e4

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      626b929b0ce2a35820eb5fa3c1ae88cdb17a88e5aebf35e2c538be406890ade5

    • Size

      297KB

    • MD5

      f9e9b22570fe1ee3547c4ed3b1049cd7

    • SHA1

      4614e108d6940a0ad2f6627db1b2bc98ad8e7282

    • SHA256

      626b929b0ce2a35820eb5fa3c1ae88cdb17a88e5aebf35e2c538be406890ade5

    • SHA512

      63e588908fd415f1fb5a35a962cb2854e761a0741d02f9b8c461ac2eb97e30baaf748301d25fc7431ab3f2daac0461bdf672ef262034e9fce493cfeb0516f9e4

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks