General

  • Target

    f9674e33b05a6cbb71c8ef7e6d0691e01f35f7152ae31e1400d4e2e5477d14da

  • Size

    373KB

  • Sample

    241109-xs64assrcl

  • MD5

    c7b4fb5e18e058dec1b50caa714f1d2f

  • SHA1

    0b995a29a41b7a62a868877d62722434ba11b16d

  • SHA256

    f9674e33b05a6cbb71c8ef7e6d0691e01f35f7152ae31e1400d4e2e5477d14da

  • SHA512

    ab94da0db5d78e4c95aaefba6e059b792b6b59fdb6a9216641ccca2c041c6ab2b5aa23b395bd42883ad6a81cae0b88dc4daeffc0cf03ef0913fc39043e4959bc

  • SSDEEP

    6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f9674e33b05a6cbb71c8ef7e6d0691e01f35f7152ae31e1400d4e2e5477d14da

    • Size

      373KB

    • MD5

      c7b4fb5e18e058dec1b50caa714f1d2f

    • SHA1

      0b995a29a41b7a62a868877d62722434ba11b16d

    • SHA256

      f9674e33b05a6cbb71c8ef7e6d0691e01f35f7152ae31e1400d4e2e5477d14da

    • SHA512

      ab94da0db5d78e4c95aaefba6e059b792b6b59fdb6a9216641ccca2c041c6ab2b5aa23b395bd42883ad6a81cae0b88dc4daeffc0cf03ef0913fc39043e4959bc

    • SSDEEP

      6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks