General

  • Target

    d26b6e37f643e47b969857979c166ce6976964676b93d479ad16720a62000926

  • Size

    422KB

  • Sample

    241110-afjqxatrbt

  • MD5

    51930ff9d64caf4d17cd2d52c457b701

  • SHA1

    de6966946f3a9a8ee280a3006aa8ae9f9fc81709

  • SHA256

    d26b6e37f643e47b969857979c166ce6976964676b93d479ad16720a62000926

  • SHA512

    483ff84e19d2a2852f316c2f7e99d48d39a14b22985c412754641ef77e0a6a16b830fe42ecb8a4bb7fff7031896d4acbcd60e958bbccf180a9d2f9ed46bffea2

  • SSDEEP

    12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d26b6e37f643e47b969857979c166ce6976964676b93d479ad16720a62000926

    • Size

      422KB

    • MD5

      51930ff9d64caf4d17cd2d52c457b701

    • SHA1

      de6966946f3a9a8ee280a3006aa8ae9f9fc81709

    • SHA256

      d26b6e37f643e47b969857979c166ce6976964676b93d479ad16720a62000926

    • SHA512

      483ff84e19d2a2852f316c2f7e99d48d39a14b22985c412754641ef77e0a6a16b830fe42ecb8a4bb7fff7031896d4acbcd60e958bbccf180a9d2f9ed46bffea2

    • SSDEEP

      12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks