General

  • Target

    ad8744274433c646b39c771c8468a08cbee77fe17ad7d5a57f3a9f1cae4ba555

  • Size

    346KB

  • Sample

    241108-yml2lsycng

  • MD5

    5960107edbec03cbef9ec360aa5cf845

  • SHA1

    623ad9ed0e03dccb461e2bf893a5624d26614563

  • SHA256

    ad8744274433c646b39c771c8468a08cbee77fe17ad7d5a57f3a9f1cae4ba555

  • SHA512

    14ba060fd3a12fa6f033d10fbfe39a9b4e9b9f1e25fad58bc2747a2bc86e91cc939ee6e4b38d0e36d859da3d9af841d94193cbe3f91b8df5338067742da4bd93

  • SSDEEP

    6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      ad8744274433c646b39c771c8468a08cbee77fe17ad7d5a57f3a9f1cae4ba555

    • Size

      346KB

    • MD5

      5960107edbec03cbef9ec360aa5cf845

    • SHA1

      623ad9ed0e03dccb461e2bf893a5624d26614563

    • SHA256

      ad8744274433c646b39c771c8468a08cbee77fe17ad7d5a57f3a9f1cae4ba555

    • SHA512

      14ba060fd3a12fa6f033d10fbfe39a9b4e9b9f1e25fad58bc2747a2bc86e91cc939ee6e4b38d0e36d859da3d9af841d94193cbe3f91b8df5338067742da4bd93

    • SSDEEP

      6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks