General

  • Target

    4a9d2af8ce4959bb6abb231cdcccdbe71b99bdf9ea195afef9ffa8edfad6d2dc

  • Size

    373KB

  • Sample

    241109-jw8veazmgt

  • MD5

    36ef3479d70981b74a043d35d55289b7

  • SHA1

    45dcd83db504c76146ea54640ce5053f18c6bac4

  • SHA256

    4a9d2af8ce4959bb6abb231cdcccdbe71b99bdf9ea195afef9ffa8edfad6d2dc

  • SHA512

    ef8e34437c17c7be6710c5fc137d8f7b50c8ed3e7fd87683e89c5fe4c93778eb4f25fa97eae61eb12182b73f592e6e790d1fdf470a5d4eb17b8ee3e4fbe4fc9b

  • SSDEEP

    6144:EWuG6QBaODOgsxbXsxsZSwzfuAXlkmwTbs3Fb7ITsqXigaXwVfz:EWuG6QBaODOg489wznXbwvi7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      4a9d2af8ce4959bb6abb231cdcccdbe71b99bdf9ea195afef9ffa8edfad6d2dc

    • Size

      373KB

    • MD5

      36ef3479d70981b74a043d35d55289b7

    • SHA1

      45dcd83db504c76146ea54640ce5053f18c6bac4

    • SHA256

      4a9d2af8ce4959bb6abb231cdcccdbe71b99bdf9ea195afef9ffa8edfad6d2dc

    • SHA512

      ef8e34437c17c7be6710c5fc137d8f7b50c8ed3e7fd87683e89c5fe4c93778eb4f25fa97eae61eb12182b73f592e6e790d1fdf470a5d4eb17b8ee3e4fbe4fc9b

    • SSDEEP

      6144:EWuG6QBaODOgsxbXsxsZSwzfuAXlkmwTbs3Fb7ITsqXigaXwVfz:EWuG6QBaODOg489wznXbwvi7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks