General

  • Target

    dae183582c40691f33c091e9b45f15d114503a77e36fabf32cb4df37d6e073c3

  • Size

    297KB

  • Sample

    241108-ycgzxaycnj

  • MD5

    f31c1865f7f723a0d8a73d0a988cbe51

  • SHA1

    00c06aff2e9ddedc9e812f9a8e8cc4915ade8181

  • SHA256

    dae183582c40691f33c091e9b45f15d114503a77e36fabf32cb4df37d6e073c3

  • SHA512

    3662d2f3d3ef8309e74646138de6b62309f005a4d56549c585306e79d0156ca9231f04a2caff4ec56320e3471b92c6f7090ad6f3d820e44555efbe30f4af3254

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      dae183582c40691f33c091e9b45f15d114503a77e36fabf32cb4df37d6e073c3

    • Size

      297KB

    • MD5

      f31c1865f7f723a0d8a73d0a988cbe51

    • SHA1

      00c06aff2e9ddedc9e812f9a8e8cc4915ade8181

    • SHA256

      dae183582c40691f33c091e9b45f15d114503a77e36fabf32cb4df37d6e073c3

    • SHA512

      3662d2f3d3ef8309e74646138de6b62309f005a4d56549c585306e79d0156ca9231f04a2caff4ec56320e3471b92c6f7090ad6f3d820e44555efbe30f4af3254

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks