General

  • Target

    46bd6bf2a75f3b85db0af70e68c9cdae85cb6c1cd56a9fae5fae539688a181f2

  • Size

    427KB

  • Sample

    241109-ayv7nawlhj

  • MD5

    73163dac48566defe6599339eb513a83

  • SHA1

    98774a8259c9ff508ea073a769462f031ffaa220

  • SHA256

    46bd6bf2a75f3b85db0af70e68c9cdae85cb6c1cd56a9fae5fae539688a181f2

  • SHA512

    7add545a0c3c7c59980464bc0ef6613a4c52d8bca0a4415396de4d500202cff9f63e0e4823ff1cabfcf2a54d824435e0af87a4875d07e359902f82c6cc57c890

  • SSDEEP

    6144:B0NMGv1CXJ7ATf6/5e2R98GDETSGhcTdzhSWa7OJ/thn/IyG8Fzk:BlGdICf6/5fvETSGhcTdzcWaAnAy0

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      46bd6bf2a75f3b85db0af70e68c9cdae85cb6c1cd56a9fae5fae539688a181f2

    • Size

      427KB

    • MD5

      73163dac48566defe6599339eb513a83

    • SHA1

      98774a8259c9ff508ea073a769462f031ffaa220

    • SHA256

      46bd6bf2a75f3b85db0af70e68c9cdae85cb6c1cd56a9fae5fae539688a181f2

    • SHA512

      7add545a0c3c7c59980464bc0ef6613a4c52d8bca0a4415396de4d500202cff9f63e0e4823ff1cabfcf2a54d824435e0af87a4875d07e359902f82c6cc57c890

    • SSDEEP

      6144:B0NMGv1CXJ7ATf6/5e2R98GDETSGhcTdzhSWa7OJ/thn/IyG8Fzk:BlGdICf6/5fvETSGhcTdzcWaAnAy0

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks