General

  • Target

    25612a7200a51331bff5436352cdc707b3b036a95de4f2ab4dda9891d7907f6a

  • Size

    438KB

  • Sample

    241108-g8nnwswqf1

  • MD5

    0ffecd02155b02c9d1e0d474b0276ab5

  • SHA1

    bbf904f3229800fa637be51b29c0290268ac5dc8

  • SHA256

    25612a7200a51331bff5436352cdc707b3b036a95de4f2ab4dda9891d7907f6a

  • SHA512

    04db906a8521d034c4b0fb9e5bbe8aaa49f742fc033e155d33fc281ac25c72aea7f0f6c9fa315c80c4d1d264de8090c83b078719431eea83a7431224a7e26966

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      25612a7200a51331bff5436352cdc707b3b036a95de4f2ab4dda9891d7907f6a

    • Size

      438KB

    • MD5

      0ffecd02155b02c9d1e0d474b0276ab5

    • SHA1

      bbf904f3229800fa637be51b29c0290268ac5dc8

    • SHA256

      25612a7200a51331bff5436352cdc707b3b036a95de4f2ab4dda9891d7907f6a

    • SHA512

      04db906a8521d034c4b0fb9e5bbe8aaa49f742fc033e155d33fc281ac25c72aea7f0f6c9fa315c80c4d1d264de8090c83b078719431eea83a7431224a7e26966

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks