General

  • Target

    b478ffe07592490258d295e5f8105aef10c8694a3765c3537314ef24defa51aa

  • Size

    370KB

  • Sample

    241109-ks4a7azrhy

  • MD5

    d581fb626935df895d8bf80d2fa8d108

  • SHA1

    6ecc84ed7bd7fc681142aea25afcd89e51158b06

  • SHA256

    b478ffe07592490258d295e5f8105aef10c8694a3765c3537314ef24defa51aa

  • SHA512

    0fc1f90dc87a63d3a53708ee6a9c85e4c2e117ef1908f690104c3a38984eef9b11ccd82059e2114ad77ca7d9c1e32f3b2a24cae670ea5d73f8b0aee4df7d57c7

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      b478ffe07592490258d295e5f8105aef10c8694a3765c3537314ef24defa51aa

    • Size

      370KB

    • MD5

      d581fb626935df895d8bf80d2fa8d108

    • SHA1

      6ecc84ed7bd7fc681142aea25afcd89e51158b06

    • SHA256

      b478ffe07592490258d295e5f8105aef10c8694a3765c3537314ef24defa51aa

    • SHA512

      0fc1f90dc87a63d3a53708ee6a9c85e4c2e117ef1908f690104c3a38984eef9b11ccd82059e2114ad77ca7d9c1e32f3b2a24cae670ea5d73f8b0aee4df7d57c7

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks