General

  • Target

    cbbb352d73a4fae63f01687c880298c423ce46e6061666d899db1a194d62ab71

  • Size

    297KB

  • Sample

    241109-npwcystelh

  • MD5

    e93e20df7b1d3278bce048c21e525477

  • SHA1

    ec9007dcf7e87a01a7441d737fdfdc74d4e95af9

  • SHA256

    cbbb352d73a4fae63f01687c880298c423ce46e6061666d899db1a194d62ab71

  • SHA512

    e019ead34d2c5d70c754b686b4e600938e7beaee972afec0d4205ba9fbe35f151c15e510bb8c31e4ddbb91b72634161ea4623ed1ea96c89d5b2582752ba40f99

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      cbbb352d73a4fae63f01687c880298c423ce46e6061666d899db1a194d62ab71

    • Size

      297KB

    • MD5

      e93e20df7b1d3278bce048c21e525477

    • SHA1

      ec9007dcf7e87a01a7441d737fdfdc74d4e95af9

    • SHA256

      cbbb352d73a4fae63f01687c880298c423ce46e6061666d899db1a194d62ab71

    • SHA512

      e019ead34d2c5d70c754b686b4e600938e7beaee972afec0d4205ba9fbe35f151c15e510bb8c31e4ddbb91b72634161ea4623ed1ea96c89d5b2582752ba40f99

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks