General

  • Target

    404d6fdc7a1cdfdc2beeeb95d65416c91d7e9e0b5250a0ee691dcd9fe3c59e2e

  • Size

    423KB

  • Sample

    241109-zqlqpasclg

  • MD5

    a40835e7f487d2d98da79635b6515127

  • SHA1

    7bbba8d5b453c1de3cc5e2bcdcc5a51612ef56f0

  • SHA256

    404d6fdc7a1cdfdc2beeeb95d65416c91d7e9e0b5250a0ee691dcd9fe3c59e2e

  • SHA512

    f4a36365f9b7bc54c1541351c335a6bee00666c695162700f1b9a9e5992434faa6e4aa4038113587d895180812d96b6a305fe0d706c9eb440c36468fcd5aafaa

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      404d6fdc7a1cdfdc2beeeb95d65416c91d7e9e0b5250a0ee691dcd9fe3c59e2e

    • Size

      423KB

    • MD5

      a40835e7f487d2d98da79635b6515127

    • SHA1

      7bbba8d5b453c1de3cc5e2bcdcc5a51612ef56f0

    • SHA256

      404d6fdc7a1cdfdc2beeeb95d65416c91d7e9e0b5250a0ee691dcd9fe3c59e2e

    • SHA512

      f4a36365f9b7bc54c1541351c335a6bee00666c695162700f1b9a9e5992434faa6e4aa4038113587d895180812d96b6a305fe0d706c9eb440c36468fcd5aafaa

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks