General

  • Target

    6c3476bcfe438c66ea3f2778cf84fe136ec18da1b5e9009688879a3b1e1f38fb

  • Size

    297KB

  • Sample

    241108-2db2tszqht

  • MD5

    5bde897fa8c46604ddab3bba2c4d0704

  • SHA1

    6f5008c619954afe17d65be6c8d4e16cb113bd72

  • SHA256

    6c3476bcfe438c66ea3f2778cf84fe136ec18da1b5e9009688879a3b1e1f38fb

  • SHA512

    cfb2d912419ab6c858f99a36144673b85225aecf61e2b3fda53fd30391fc7346f56ccde9cf94313bbe31cd9f701c8b2ce96f1b7cb2398054840e1511e2f05980

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6c3476bcfe438c66ea3f2778cf84fe136ec18da1b5e9009688879a3b1e1f38fb

    • Size

      297KB

    • MD5

      5bde897fa8c46604ddab3bba2c4d0704

    • SHA1

      6f5008c619954afe17d65be6c8d4e16cb113bd72

    • SHA256

      6c3476bcfe438c66ea3f2778cf84fe136ec18da1b5e9009688879a3b1e1f38fb

    • SHA512

      cfb2d912419ab6c858f99a36144673b85225aecf61e2b3fda53fd30391fc7346f56ccde9cf94313bbe31cd9f701c8b2ce96f1b7cb2398054840e1511e2f05980

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks