General

  • Target

    1680276bef7e9b1091c988d1201eda93094bbcf2066624fd95b8371fa0a8dca7

  • Size

    383KB

  • Sample

    241108-xx2pdaxjh1

  • MD5

    3c5ac3f6e44c41df0034b30bc85afb0b

  • SHA1

    310658289f336360ce9c9dc8fee322c176e15b4e

  • SHA256

    1680276bef7e9b1091c988d1201eda93094bbcf2066624fd95b8371fa0a8dca7

  • SHA512

    f440cc6cf54ccec393dc0f2f250a3617221c06565ff5bc9c021a5080f09136cfff70ef3f396e9a8713ad77a866ab45a5371d0c470ea9f1af7e9961f55250780e

  • SSDEEP

    6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      1680276bef7e9b1091c988d1201eda93094bbcf2066624fd95b8371fa0a8dca7

    • Size

      383KB

    • MD5

      3c5ac3f6e44c41df0034b30bc85afb0b

    • SHA1

      310658289f336360ce9c9dc8fee322c176e15b4e

    • SHA256

      1680276bef7e9b1091c988d1201eda93094bbcf2066624fd95b8371fa0a8dca7

    • SHA512

      f440cc6cf54ccec393dc0f2f250a3617221c06565ff5bc9c021a5080f09136cfff70ef3f396e9a8713ad77a866ab45a5371d0c470ea9f1af7e9961f55250780e

    • SSDEEP

      6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks