General

  • Target

    be382e8156163efd74b1ef3219adbca789636eb19c9be96cf242633d5f7ee6d0

  • Size

    423KB

  • Sample

    241109-13v1kasnax

  • MD5

    751fb7fffe098c9ef863ba2fabedb48f

  • SHA1

    4c862deac93eac73ab1bcec854746e9686966753

  • SHA256

    be382e8156163efd74b1ef3219adbca789636eb19c9be96cf242633d5f7ee6d0

  • SHA512

    2a9336d55c6323d2b2fd990230fc135471a85e5fa50cc0a12d5de13dd56a7d2cf28021b75fe3b73af422924d18460e5a90b4ef237ce899f3c5b0bd6b4b39dcf3

  • SSDEEP

    6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      be382e8156163efd74b1ef3219adbca789636eb19c9be96cf242633d5f7ee6d0

    • Size

      423KB

    • MD5

      751fb7fffe098c9ef863ba2fabedb48f

    • SHA1

      4c862deac93eac73ab1bcec854746e9686966753

    • SHA256

      be382e8156163efd74b1ef3219adbca789636eb19c9be96cf242633d5f7ee6d0

    • SHA512

      2a9336d55c6323d2b2fd990230fc135471a85e5fa50cc0a12d5de13dd56a7d2cf28021b75fe3b73af422924d18460e5a90b4ef237ce899f3c5b0bd6b4b39dcf3

    • SSDEEP

      6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks