General

  • Target

    222112bd00737f293d7c40eea7c26c5628afafe936e0ff225e1ad3daa28fc6f1

  • Size

    383KB

  • Sample

    241109-ywvp4s1elr

  • MD5

    640eaea685afea6f8d668d2afe5a613a

  • SHA1

    6efd4327f5de4390520ea5e10359e8d8020685cb

  • SHA256

    222112bd00737f293d7c40eea7c26c5628afafe936e0ff225e1ad3daa28fc6f1

  • SHA512

    c929adc180be36c5bfdce93e38138356d7d75c96012a58ad410a0b3609a6dfceb82667bad23d2a7723e5f09692ab1c532f1f9866173d9ec1191a510f86d5e546

  • SSDEEP

    6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      222112bd00737f293d7c40eea7c26c5628afafe936e0ff225e1ad3daa28fc6f1

    • Size

      383KB

    • MD5

      640eaea685afea6f8d668d2afe5a613a

    • SHA1

      6efd4327f5de4390520ea5e10359e8d8020685cb

    • SHA256

      222112bd00737f293d7c40eea7c26c5628afafe936e0ff225e1ad3daa28fc6f1

    • SHA512

      c929adc180be36c5bfdce93e38138356d7d75c96012a58ad410a0b3609a6dfceb82667bad23d2a7723e5f09692ab1c532f1f9866173d9ec1191a510f86d5e546

    • SSDEEP

      6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks