General

  • Target

    5ec688da9f9cc2fc65d7f16ba50a9e7ac082176e3ff2fbb42b60ac5a093f1d67

  • Size

    442KB

  • Sample

    241109-s3b9fszmhm

  • MD5

    746fd40adc1a879914ab0e32b332e1dd

  • SHA1

    1a86aa44b9bdf7c76d7ab7aaf5f55cd4deda1e65

  • SHA256

    5ec688da9f9cc2fc65d7f16ba50a9e7ac082176e3ff2fbb42b60ac5a093f1d67

  • SHA512

    75eb5a5a47cfd603bc840c40e1f3f374c2766a833d597761ad4bad1ff4fc81db8a7af3d5c986c3d364165d1994604cca6f586161901799acb209aec9842d84b0

  • SSDEEP

    6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      5ec688da9f9cc2fc65d7f16ba50a9e7ac082176e3ff2fbb42b60ac5a093f1d67

    • Size

      442KB

    • MD5

      746fd40adc1a879914ab0e32b332e1dd

    • SHA1

      1a86aa44b9bdf7c76d7ab7aaf5f55cd4deda1e65

    • SHA256

      5ec688da9f9cc2fc65d7f16ba50a9e7ac082176e3ff2fbb42b60ac5a093f1d67

    • SHA512

      75eb5a5a47cfd603bc840c40e1f3f374c2766a833d597761ad4bad1ff4fc81db8a7af3d5c986c3d364165d1994604cca6f586161901799acb209aec9842d84b0

    • SSDEEP

      6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks