General

  • Target

    79fcb864b95be7b650d24548be1a40110c2f9bbe5110bb9a8a4097efbd8fea0d

  • Size

    373KB

  • Sample

    241108-3s7ygs1rdw

  • MD5

    a814c42a61e5897d4d4b1a6f4a8566a4

  • SHA1

    8e4845151d74399f04ad5482bfe34641638ed1ef

  • SHA256

    79fcb864b95be7b650d24548be1a40110c2f9bbe5110bb9a8a4097efbd8fea0d

  • SHA512

    2a636ab100259dab554a309464983f05fb38413f675b2b105eda0d90daeef5bd5e5c6533d67fd825e26801a60959c993f642f70194826e438c369d1886661168

  • SSDEEP

    6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      79fcb864b95be7b650d24548be1a40110c2f9bbe5110bb9a8a4097efbd8fea0d

    • Size

      373KB

    • MD5

      a814c42a61e5897d4d4b1a6f4a8566a4

    • SHA1

      8e4845151d74399f04ad5482bfe34641638ed1ef

    • SHA256

      79fcb864b95be7b650d24548be1a40110c2f9bbe5110bb9a8a4097efbd8fea0d

    • SHA512

      2a636ab100259dab554a309464983f05fb38413f675b2b105eda0d90daeef5bd5e5c6533d67fd825e26801a60959c993f642f70194826e438c369d1886661168

    • SSDEEP

      6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks