General

  • Target

    6f260197369e195f7478fdf67e2d32b3e85544ac7f4b4a9ce49d882eabaa0605

  • Size

    411KB

  • Sample

    241108-rg2rjswmck

  • MD5

    d46c717b633b52ab1c71b4afeab348d9

  • SHA1

    35992c5e29ed960918b63798ffe07710ff59cfe5

  • SHA256

    6f260197369e195f7478fdf67e2d32b3e85544ac7f4b4a9ce49d882eabaa0605

  • SHA512

    5beef4335ece22df97040110282fd335510af4f7f191d916f2f26e7eec7bdd50ff04e001b1e5138dc549aa1f929dffa3ec299419b5f9a751e70bcc9bb386acfd

  • SSDEEP

    6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      6f260197369e195f7478fdf67e2d32b3e85544ac7f4b4a9ce49d882eabaa0605

    • Size

      411KB

    • MD5

      d46c717b633b52ab1c71b4afeab348d9

    • SHA1

      35992c5e29ed960918b63798ffe07710ff59cfe5

    • SHA256

      6f260197369e195f7478fdf67e2d32b3e85544ac7f4b4a9ce49d882eabaa0605

    • SHA512

      5beef4335ece22df97040110282fd335510af4f7f191d916f2f26e7eec7bdd50ff04e001b1e5138dc549aa1f929dffa3ec299419b5f9a751e70bcc9bb386acfd

    • SSDEEP

      6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks