General

  • Target

    6584ca9af8a59168b1c7402aa61c16583d97f23c8a3fc117e7fba92a49f0c2e1

  • Size

    297KB

  • Sample

    241110-aye6favlgy

  • MD5

    364e3e7a53f7c90a6517a28faf767ac0

  • SHA1

    590ea3fc1f2cf8205a475036362c23a22b2a963c

  • SHA256

    6584ca9af8a59168b1c7402aa61c16583d97f23c8a3fc117e7fba92a49f0c2e1

  • SHA512

    2109107b5275fd11b1391dc86b6f358df0afa9195196453aff0948406a1225b104b303d4f631e02f6e58a0b36b6a737c921807125befae64fa66d3e62423911c

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6584ca9af8a59168b1c7402aa61c16583d97f23c8a3fc117e7fba92a49f0c2e1

    • Size

      297KB

    • MD5

      364e3e7a53f7c90a6517a28faf767ac0

    • SHA1

      590ea3fc1f2cf8205a475036362c23a22b2a963c

    • SHA256

      6584ca9af8a59168b1c7402aa61c16583d97f23c8a3fc117e7fba92a49f0c2e1

    • SHA512

      2109107b5275fd11b1391dc86b6f358df0afa9195196453aff0948406a1225b104b303d4f631e02f6e58a0b36b6a737c921807125befae64fa66d3e62423911c

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks