General

  • Target

    ddcac766bac592ed1652aadaab781b8335fc0693b35a26d2c63ca34565ca45fe

  • Size

    427KB

  • Sample

    241109-m5n35sslft

  • MD5

    a4fd5c1004ae2f9c608b9f506ce61599

  • SHA1

    5c2f997a32a63548f3aa80d91181648322e42fdb

  • SHA256

    ddcac766bac592ed1652aadaab781b8335fc0693b35a26d2c63ca34565ca45fe

  • SHA512

    494c6a1b76eb004f7feeee1f146e46822f4a85ae049a578afcb2d998708acd2430735e407190be065f47886b8050ead441c3a6d7651483bdd7237d35f5d82563

  • SSDEEP

    6144:B0NMGv1CXJ7ATf6/5e2R98GDETSGhcTdzhSWa7OJ/thn/IyG8Fzk:BlGdICf6/5fvETSGhcTdzcWaAnAy0

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      ddcac766bac592ed1652aadaab781b8335fc0693b35a26d2c63ca34565ca45fe

    • Size

      427KB

    • MD5

      a4fd5c1004ae2f9c608b9f506ce61599

    • SHA1

      5c2f997a32a63548f3aa80d91181648322e42fdb

    • SHA256

      ddcac766bac592ed1652aadaab781b8335fc0693b35a26d2c63ca34565ca45fe

    • SHA512

      494c6a1b76eb004f7feeee1f146e46822f4a85ae049a578afcb2d998708acd2430735e407190be065f47886b8050ead441c3a6d7651483bdd7237d35f5d82563

    • SSDEEP

      6144:B0NMGv1CXJ7ATf6/5e2R98GDETSGhcTdzhSWa7OJ/thn/IyG8Fzk:BlGdICf6/5fvETSGhcTdzcWaAnAy0

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks