General

  • Target

    0ff90dbea4338c07c792fc457ca4d1632b7be6f1dec873aaa1d4193b057818e2

  • Size

    428KB

  • Sample

    241109-gn2d9ayhjd

  • MD5

    5ecbbcb1317fd60b9548d8911a6ddd0b

  • SHA1

    7fa9c4e856aede7da8d85a7f6ce3e9a9c199206b

  • SHA256

    0ff90dbea4338c07c792fc457ca4d1632b7be6f1dec873aaa1d4193b057818e2

  • SHA512

    0732a101c6c54a80f3b13ff0fe3f7337646fe2c719a7b5532671fe4643e5889782a226239bb427121059388377cb4c291726327c3c35b6fe530c0279331f6891

  • SSDEEP

    6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      0ff90dbea4338c07c792fc457ca4d1632b7be6f1dec873aaa1d4193b057818e2

    • Size

      428KB

    • MD5

      5ecbbcb1317fd60b9548d8911a6ddd0b

    • SHA1

      7fa9c4e856aede7da8d85a7f6ce3e9a9c199206b

    • SHA256

      0ff90dbea4338c07c792fc457ca4d1632b7be6f1dec873aaa1d4193b057818e2

    • SHA512

      0732a101c6c54a80f3b13ff0fe3f7337646fe2c719a7b5532671fe4643e5889782a226239bb427121059388377cb4c291726327c3c35b6fe530c0279331f6891

    • SSDEEP

      6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks