General

  • Target

    696c380c152589caebbfd042d7367c72a30efa0e40725c6cb1778f519ab64d03

  • Size

    438KB

  • Sample

    241108-vt6staymaj

  • MD5

    35d58401111391b3e409100326f8b18d

  • SHA1

    4defaeaa3adf4c548909db1c581dd7701a7f3b59

  • SHA256

    696c380c152589caebbfd042d7367c72a30efa0e40725c6cb1778f519ab64d03

  • SHA512

    72c3c2cff4e3e60590752ddd9aefc3d31da3f3e01082112e842c5e2ef8c7f816374edb23d03b4f67c8c1988869373da96abdf2a8d96f48330c22c40923a13ad2

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      696c380c152589caebbfd042d7367c72a30efa0e40725c6cb1778f519ab64d03

    • Size

      438KB

    • MD5

      35d58401111391b3e409100326f8b18d

    • SHA1

      4defaeaa3adf4c548909db1c581dd7701a7f3b59

    • SHA256

      696c380c152589caebbfd042d7367c72a30efa0e40725c6cb1778f519ab64d03

    • SHA512

      72c3c2cff4e3e60590752ddd9aefc3d31da3f3e01082112e842c5e2ef8c7f816374edb23d03b4f67c8c1988869373da96abdf2a8d96f48330c22c40923a13ad2

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks