General

  • Target

    70a99bbc9220ad17cfc1e5ea1a319d1787d471bf4a6899cdac49a2d0bdace938

  • Size

    297KB

  • Sample

    241108-3zycmasgjq

  • MD5

    a98da5405fd6054beb9453b1799ef6c1

  • SHA1

    87a5f0f4a7764770f825b5254b4fc8e4d54f1cd3

  • SHA256

    70a99bbc9220ad17cfc1e5ea1a319d1787d471bf4a6899cdac49a2d0bdace938

  • SHA512

    b582bad2d98d4824c9b8745b65b0a6ba93a48dc607aa14dffbd05abb0c48504956931bc175a308a29fea89e608e377e3df673a5e525beb4d6ecd4ae73f2eb117

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      70a99bbc9220ad17cfc1e5ea1a319d1787d471bf4a6899cdac49a2d0bdace938

    • Size

      297KB

    • MD5

      a98da5405fd6054beb9453b1799ef6c1

    • SHA1

      87a5f0f4a7764770f825b5254b4fc8e4d54f1cd3

    • SHA256

      70a99bbc9220ad17cfc1e5ea1a319d1787d471bf4a6899cdac49a2d0bdace938

    • SHA512

      b582bad2d98d4824c9b8745b65b0a6ba93a48dc607aa14dffbd05abb0c48504956931bc175a308a29fea89e608e377e3df673a5e525beb4d6ecd4ae73f2eb117

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks