General

  • Target

    db4d149ac0ce5e63db682a0fd04e6a94516b2c872d4aed630a7c562c8a6b5537

  • Size

    423KB

  • Sample

    241109-ckbl7svemr

  • MD5

    56d17455556da164c7c6084f4ca77260

  • SHA1

    28097435370a2310963638f1382b4547d4ed9001

  • SHA256

    db4d149ac0ce5e63db682a0fd04e6a94516b2c872d4aed630a7c562c8a6b5537

  • SHA512

    2837c8d8afcba70591dd0bc6aec6d074297241cbf51ea06c5059b767cf61e194228ca11d2c174a088617c201e3f4e6159c9778ddb09d8fc7ef31c22ed1b30488

  • SSDEEP

    12288:u4rXu0OVUf2Au746adZtIzkNDtZuFM9bT6f+N:1lOG2tJ89tMUI+

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      db4d149ac0ce5e63db682a0fd04e6a94516b2c872d4aed630a7c562c8a6b5537

    • Size

      423KB

    • MD5

      56d17455556da164c7c6084f4ca77260

    • SHA1

      28097435370a2310963638f1382b4547d4ed9001

    • SHA256

      db4d149ac0ce5e63db682a0fd04e6a94516b2c872d4aed630a7c562c8a6b5537

    • SHA512

      2837c8d8afcba70591dd0bc6aec6d074297241cbf51ea06c5059b767cf61e194228ca11d2c174a088617c201e3f4e6159c9778ddb09d8fc7ef31c22ed1b30488

    • SSDEEP

      12288:u4rXu0OVUf2Au746adZtIzkNDtZuFM9bT6f+N:1lOG2tJ89tMUI+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks