General

  • Target

    4d6065a0a57296d5ad9860af392213bc06e83040d55a6f7d5e2b08bf19a643bc

  • Size

    423KB

  • Sample

    241108-stzy6avcjb

  • MD5

    60fbee74827cfc94a44ca7bda6e69c76

  • SHA1

    86a7da7b4d8092b613de3de1618e976da54fbf0e

  • SHA256

    4d6065a0a57296d5ad9860af392213bc06e83040d55a6f7d5e2b08bf19a643bc

  • SHA512

    e9424d8d5cc811d10ef6e2bd078dfed4f82ddb2b13b7630802978e26f738b350e317a9ec42d034a22d12f92f28991b9ab73f5a54968a21b0130e3a5302563bd0

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      4d6065a0a57296d5ad9860af392213bc06e83040d55a6f7d5e2b08bf19a643bc

    • Size

      423KB

    • MD5

      60fbee74827cfc94a44ca7bda6e69c76

    • SHA1

      86a7da7b4d8092b613de3de1618e976da54fbf0e

    • SHA256

      4d6065a0a57296d5ad9860af392213bc06e83040d55a6f7d5e2b08bf19a643bc

    • SHA512

      e9424d8d5cc811d10ef6e2bd078dfed4f82ddb2b13b7630802978e26f738b350e317a9ec42d034a22d12f92f28991b9ab73f5a54968a21b0130e3a5302563bd0

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks