General

  • Target

    71766be085d58eef637e40f3a697275a0a59f5de7c6379d54aa04e4c9f8f553d

  • Size

    438KB

  • Sample

    241109-kgq7gs1fjh

  • MD5

    926274fc059957d17a2e3db53b763cfa

  • SHA1

    ee394105045784aaa18fe9c6425417b5c8eb9f8d

  • SHA256

    71766be085d58eef637e40f3a697275a0a59f5de7c6379d54aa04e4c9f8f553d

  • SHA512

    c979c653db8939eb54f49bdb8e27bad8aa51a4ac44150d6e2205d04878b74bc9ca26eda0c90b8d44396169de929814463d3a3e5cc7c4aa314016ec21a3505422

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      71766be085d58eef637e40f3a697275a0a59f5de7c6379d54aa04e4c9f8f553d

    • Size

      438KB

    • MD5

      926274fc059957d17a2e3db53b763cfa

    • SHA1

      ee394105045784aaa18fe9c6425417b5c8eb9f8d

    • SHA256

      71766be085d58eef637e40f3a697275a0a59f5de7c6379d54aa04e4c9f8f553d

    • SHA512

      c979c653db8939eb54f49bdb8e27bad8aa51a4ac44150d6e2205d04878b74bc9ca26eda0c90b8d44396169de929814463d3a3e5cc7c4aa314016ec21a3505422

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks