General

  • Target

    6e182189f4bc13776df75e00e042704d0dbfaa303dacce1f50985cb5a5552844

  • Size

    410KB

  • Sample

    241110-a7ntyawbpl

  • MD5

    07eb6c1fb59ddc26fa98a23a255980f5

  • SHA1

    73eb8a5fac8b891cb866f739742ec8fd51d96384

  • SHA256

    6e182189f4bc13776df75e00e042704d0dbfaa303dacce1f50985cb5a5552844

  • SHA512

    1894870cd966df852588ca7e83573161013f00138c2f76aef5d0132d11b9d62c0b93035fa64b74aa1b27bbb1992f09181ae0a48f783c82fe655bc20a582da1d6

  • SSDEEP

    6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      6e182189f4bc13776df75e00e042704d0dbfaa303dacce1f50985cb5a5552844

    • Size

      410KB

    • MD5

      07eb6c1fb59ddc26fa98a23a255980f5

    • SHA1

      73eb8a5fac8b891cb866f739742ec8fd51d96384

    • SHA256

      6e182189f4bc13776df75e00e042704d0dbfaa303dacce1f50985cb5a5552844

    • SHA512

      1894870cd966df852588ca7e83573161013f00138c2f76aef5d0132d11b9d62c0b93035fa64b74aa1b27bbb1992f09181ae0a48f783c82fe655bc20a582da1d6

    • SSDEEP

      6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks