General

  • Target

    207b18288dc40a4f557bd7fb385c877a1e6f8aaf5b7aa856c80caeb1f528cc33

  • Size

    371KB

  • Sample

    241108-vwlknaymbp

  • MD5

    14544b54fc9b3101b18b3361fb41ec84

  • SHA1

    bf9d8f14a77690bf88e94b348921f53a8c1e0054

  • SHA256

    207b18288dc40a4f557bd7fb385c877a1e6f8aaf5b7aa856c80caeb1f528cc33

  • SHA512

    216714c99a1a584808eaf1d7177724be46ef4040e0635232ad2f6272765a7abace8393a00654daa69cc82c53b80ed02f2445865532d479cae8e721cc4ca062ad

  • SSDEEP

    6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      207b18288dc40a4f557bd7fb385c877a1e6f8aaf5b7aa856c80caeb1f528cc33

    • Size

      371KB

    • MD5

      14544b54fc9b3101b18b3361fb41ec84

    • SHA1

      bf9d8f14a77690bf88e94b348921f53a8c1e0054

    • SHA256

      207b18288dc40a4f557bd7fb385c877a1e6f8aaf5b7aa856c80caeb1f528cc33

    • SHA512

      216714c99a1a584808eaf1d7177724be46ef4040e0635232ad2f6272765a7abace8393a00654daa69cc82c53b80ed02f2445865532d479cae8e721cc4ca062ad

    • SSDEEP

      6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks