General

  • Target

    d4512b0f9769bd0ea8463811fb26b40feb3f2623e030e51f7b8a1833874b6807

  • Size

    346KB

  • Sample

    241109-wsrsyaslan

  • MD5

    6efb4ff4d0bd4f321bd89d9d090f2b35

  • SHA1

    9a98080f31102405f50d5f91d143e9bc0b1b485a

  • SHA256

    d4512b0f9769bd0ea8463811fb26b40feb3f2623e030e51f7b8a1833874b6807

  • SHA512

    6e897a9c122b99612a48636734a37c8a97f21e6dcac4e954e09acc41c70fe44a6d266f01f9cd075e7a22bcb4ad4f3627e8ffbf27c1ca88d900eb3a4ac846d1ce

  • SSDEEP

    6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d4512b0f9769bd0ea8463811fb26b40feb3f2623e030e51f7b8a1833874b6807

    • Size

      346KB

    • MD5

      6efb4ff4d0bd4f321bd89d9d090f2b35

    • SHA1

      9a98080f31102405f50d5f91d143e9bc0b1b485a

    • SHA256

      d4512b0f9769bd0ea8463811fb26b40feb3f2623e030e51f7b8a1833874b6807

    • SHA512

      6e897a9c122b99612a48636734a37c8a97f21e6dcac4e954e09acc41c70fe44a6d266f01f9cd075e7a22bcb4ad4f3627e8ffbf27c1ca88d900eb3a4ac846d1ce

    • SSDEEP

      6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks