General

  • Target

    c0d91bdfb79fbe99ccb6850218f2596ad031c3650c611dc7c21236132230596e

  • Size

    423KB

  • Sample

    241109-l8j3xsseqb

  • MD5

    01b3597c85302cbe177c0bbd527ee8cf

  • SHA1

    ed3b3328f517bf47cd7fab44708b7b606de60e3e

  • SHA256

    c0d91bdfb79fbe99ccb6850218f2596ad031c3650c611dc7c21236132230596e

  • SHA512

    c462dbc50df5282da1e353f95719884f601cd1ac90c04e565f53ce9b3e752a293c563d535bee4c355f7622c90cf2cd7eb2e07481eb4f11b5f03f6d83ae905401

  • SSDEEP

    12288:u4rXu0OVUf2Au746adZtIzkNDtZuFM9bT6f+N:1lOG2tJ89tMUI+

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      c0d91bdfb79fbe99ccb6850218f2596ad031c3650c611dc7c21236132230596e

    • Size

      423KB

    • MD5

      01b3597c85302cbe177c0bbd527ee8cf

    • SHA1

      ed3b3328f517bf47cd7fab44708b7b606de60e3e

    • SHA256

      c0d91bdfb79fbe99ccb6850218f2596ad031c3650c611dc7c21236132230596e

    • SHA512

      c462dbc50df5282da1e353f95719884f601cd1ac90c04e565f53ce9b3e752a293c563d535bee4c355f7622c90cf2cd7eb2e07481eb4f11b5f03f6d83ae905401

    • SSDEEP

      12288:u4rXu0OVUf2Au746adZtIzkNDtZuFM9bT6f+N:1lOG2tJ89tMUI+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks