General

  • Target

    bc16fa092bec186b6322aa5e110b16b781fdb447c1fb0b8249b064750ad452c5

  • Size

    297KB

  • Sample

    241109-wcjsdsygkf

  • MD5

    6a941f4502276ac5379644ea5bc7f168

  • SHA1

    3b7c1ea6d2f90e142f414c4787e3db7aae840cac

  • SHA256

    bc16fa092bec186b6322aa5e110b16b781fdb447c1fb0b8249b064750ad452c5

  • SHA512

    6f65f2e583110f55cfbd7f310a83a50c638de261a7a945586d01a3b1e9e77e1227cab21b09388b9d6ebeae5bbdaa7378c82c473e3809364492b3c7527dea9a89

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      bc16fa092bec186b6322aa5e110b16b781fdb447c1fb0b8249b064750ad452c5

    • Size

      297KB

    • MD5

      6a941f4502276ac5379644ea5bc7f168

    • SHA1

      3b7c1ea6d2f90e142f414c4787e3db7aae840cac

    • SHA256

      bc16fa092bec186b6322aa5e110b16b781fdb447c1fb0b8249b064750ad452c5

    • SHA512

      6f65f2e583110f55cfbd7f310a83a50c638de261a7a945586d01a3b1e9e77e1227cab21b09388b9d6ebeae5bbdaa7378c82c473e3809364492b3c7527dea9a89

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks