General

  • Target

    abc133aaf41f6d61123966f6393c41213825fb69710a88196371392f7b196c17

  • Size

    298KB

  • Sample

    241108-yz9cnsyglq

  • MD5

    6cf6d6a68e5ff5c42f354c4fe0f24717

  • SHA1

    4f680235df14005c94b0e0931e5b5de33e25ab77

  • SHA256

    abc133aaf41f6d61123966f6393c41213825fb69710a88196371392f7b196c17

  • SHA512

    dbb2293990c3be8786c9543221bb9c5b3904c5aa364e0c40a070be6df7f9b25a448859c70bcfb0254f37502a948f7e0caa6c6d55131f6b46db8ed5bded3cee3c

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      abc133aaf41f6d61123966f6393c41213825fb69710a88196371392f7b196c17

    • Size

      298KB

    • MD5

      6cf6d6a68e5ff5c42f354c4fe0f24717

    • SHA1

      4f680235df14005c94b0e0931e5b5de33e25ab77

    • SHA256

      abc133aaf41f6d61123966f6393c41213825fb69710a88196371392f7b196c17

    • SHA512

      dbb2293990c3be8786c9543221bb9c5b3904c5aa364e0c40a070be6df7f9b25a448859c70bcfb0254f37502a948f7e0caa6c6d55131f6b46db8ed5bded3cee3c

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks