General

  • Target

    1dd0cd7f7abf7d1ac71ab3c74d78dfd53d6b5336aa52809b56775106bc826ed6

  • Size

    371KB

  • Sample

    241108-z2y56asmhm

  • MD5

    020bb1b1ff5c6e9a5f27d19201a52104

  • SHA1

    1b5b70a38d5516a66c362a672154739eb9608235

  • SHA256

    1dd0cd7f7abf7d1ac71ab3c74d78dfd53d6b5336aa52809b56775106bc826ed6

  • SHA512

    909177247f84aec5d74ecc61295df4542cc272551de41f469ed555fac8a2178baa9fc4d81067d24fbccb0de12e1acb4eed6e9a9336c2f2484d0b3a91cc943ad8

  • SSDEEP

    6144:I1c95HIATYxl4z3GTkAe0YnGDw2IKcO/w+XiILU6dqb7ITsqXigaXwVfi:I1c95H7TYrCYkAepCw2oOI4kL7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      1dd0cd7f7abf7d1ac71ab3c74d78dfd53d6b5336aa52809b56775106bc826ed6

    • Size

      371KB

    • MD5

      020bb1b1ff5c6e9a5f27d19201a52104

    • SHA1

      1b5b70a38d5516a66c362a672154739eb9608235

    • SHA256

      1dd0cd7f7abf7d1ac71ab3c74d78dfd53d6b5336aa52809b56775106bc826ed6

    • SHA512

      909177247f84aec5d74ecc61295df4542cc272551de41f469ed555fac8a2178baa9fc4d81067d24fbccb0de12e1acb4eed6e9a9336c2f2484d0b3a91cc943ad8

    • SSDEEP

      6144:I1c95HIATYxl4z3GTkAe0YnGDw2IKcO/w+XiILU6dqb7ITsqXigaXwVfi:I1c95H7TYrCYkAepCw2oOI4kL7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks