General

  • Target

    aaae46c5f8f93fd54c835858c762a492612ddc2531ceb868c53e10fc924c4372

  • Size

    297KB

  • Sample

    241109-cn9y6svfmc

  • MD5

    a2d6e8fcb9b036d64b7b8f043e186e34

  • SHA1

    3235d19ff3dd50ccc3f44d037ab9493db521c3a8

  • SHA256

    aaae46c5f8f93fd54c835858c762a492612ddc2531ceb868c53e10fc924c4372

  • SHA512

    34eec0da7c02b75a2bd9632932a899a0cb39a0a116b0c48dc2c61b0ef573bbec51f9f5eb255dfa83243f7eaa97960e6d6cf29a3cb795d3ee52c6c92ec2f246a0

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      aaae46c5f8f93fd54c835858c762a492612ddc2531ceb868c53e10fc924c4372

    • Size

      297KB

    • MD5

      a2d6e8fcb9b036d64b7b8f043e186e34

    • SHA1

      3235d19ff3dd50ccc3f44d037ab9493db521c3a8

    • SHA256

      aaae46c5f8f93fd54c835858c762a492612ddc2531ceb868c53e10fc924c4372

    • SHA512

      34eec0da7c02b75a2bd9632932a899a0cb39a0a116b0c48dc2c61b0ef573bbec51f9f5eb255dfa83243f7eaa97960e6d6cf29a3cb795d3ee52c6c92ec2f246a0

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks