General

  • Target

    9a84032c029e1d732f61b0c1d6fc20b80195670ddf1460dc236c54491f51fc3d

  • Size

    371KB

  • Sample

    241108-drgbpsthjb

  • MD5

    37793a29cb2a72d62012e001ccc3902b

  • SHA1

    e5dee691fe7b1fe3f46b42c30d1cc46c5fe84de5

  • SHA256

    9a84032c029e1d732f61b0c1d6fc20b80195670ddf1460dc236c54491f51fc3d

  • SHA512

    c362cb615a9edb42bfad586fd6f82b045d861ce54226a1433ec4336f6a6ad04f02b5c351071e593445effd52856ad81aa767bdb67fb2e7528eabbb6ea3f9c78c

  • SSDEEP

    6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      9a84032c029e1d732f61b0c1d6fc20b80195670ddf1460dc236c54491f51fc3d

    • Size

      371KB

    • MD5

      37793a29cb2a72d62012e001ccc3902b

    • SHA1

      e5dee691fe7b1fe3f46b42c30d1cc46c5fe84de5

    • SHA256

      9a84032c029e1d732f61b0c1d6fc20b80195670ddf1460dc236c54491f51fc3d

    • SHA512

      c362cb615a9edb42bfad586fd6f82b045d861ce54226a1433ec4336f6a6ad04f02b5c351071e593445effd52856ad81aa767bdb67fb2e7528eabbb6ea3f9c78c

    • SSDEEP

      6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks