General

  • Target

    836c540c032bfe14547ce9ca73d9d2dbfa39d7ef7b9facdaa3c755f4e94712fb

  • Size

    371KB

  • Sample

    241109-d87j8awhrc

  • MD5

    d895fed72026e82a71ec9b52bd503f0e

  • SHA1

    38af168b8183bea26f62d60c253bb88d570d060a

  • SHA256

    836c540c032bfe14547ce9ca73d9d2dbfa39d7ef7b9facdaa3c755f4e94712fb

  • SHA512

    ddd3b4e7a6d435234347039ca450ce022834e665cf01df14e43a70f7ba7a07660592d6e2d66ef2a770fa5fb9133976513468fb36aecd01223d05946ef83cf677

  • SSDEEP

    6144:I1c95HIATYxl4z3GTkAe0YnGDw2IKcO/w+XiILU6dqb7ITsqXigaXwVfi:I1c95H7TYrCYkAepCw2oOI4kL7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      836c540c032bfe14547ce9ca73d9d2dbfa39d7ef7b9facdaa3c755f4e94712fb

    • Size

      371KB

    • MD5

      d895fed72026e82a71ec9b52bd503f0e

    • SHA1

      38af168b8183bea26f62d60c253bb88d570d060a

    • SHA256

      836c540c032bfe14547ce9ca73d9d2dbfa39d7ef7b9facdaa3c755f4e94712fb

    • SHA512

      ddd3b4e7a6d435234347039ca450ce022834e665cf01df14e43a70f7ba7a07660592d6e2d66ef2a770fa5fb9133976513468fb36aecd01223d05946ef83cf677

    • SSDEEP

      6144:I1c95HIATYxl4z3GTkAe0YnGDw2IKcO/w+XiILU6dqb7ITsqXigaXwVfi:I1c95H7TYrCYkAepCw2oOI4kL7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks