General

  • Target

    6d40e338f573cd2de2906b32313b73800c0b8257f9b38af903215cdd2775f10b

  • Size

    371KB

  • Sample

    241110-at2hwawaqe

  • MD5

    460625fb61e81a227a182b601a61cbf5

  • SHA1

    89d127803f6f3f94054352336bfae2aab9b8aec0

  • SHA256

    6d40e338f573cd2de2906b32313b73800c0b8257f9b38af903215cdd2775f10b

  • SHA512

    3f025e2eec9d12b8e4e2775959b572d2c81596174dd9203c3701dfa13715f9dfae56a29ab9949f335685723d9e91be30d4250c4237ef4bb18fd305ee71b9d0a0

  • SSDEEP

    6144:K5T6cP+DC7WJrK3tg4LobitExnGRZyodb7ITsqXigaXwVfh:K5T6cEKWJMW7GR5h7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6d40e338f573cd2de2906b32313b73800c0b8257f9b38af903215cdd2775f10b

    • Size

      371KB

    • MD5

      460625fb61e81a227a182b601a61cbf5

    • SHA1

      89d127803f6f3f94054352336bfae2aab9b8aec0

    • SHA256

      6d40e338f573cd2de2906b32313b73800c0b8257f9b38af903215cdd2775f10b

    • SHA512

      3f025e2eec9d12b8e4e2775959b572d2c81596174dd9203c3701dfa13715f9dfae56a29ab9949f335685723d9e91be30d4250c4237ef4bb18fd305ee71b9d0a0

    • SSDEEP

      6144:K5T6cP+DC7WJrK3tg4LobitExnGRZyodb7ITsqXigaXwVfh:K5T6cEKWJMW7GR5h7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks