General

  • Target

    661de3e33880db5e921b9dca0bb9a936e5c8d33de5ee8e772488c7ff0166deb8

  • Size

    297KB

  • Sample

    241110-cny7nsxekb

  • MD5

    ae75aa4d8441b62afba502edcc3396db

  • SHA1

    f22826f551493af0001bb6074bb0a06775955f7c

  • SHA256

    661de3e33880db5e921b9dca0bb9a936e5c8d33de5ee8e772488c7ff0166deb8

  • SHA512

    4db1ce64b7ade466d27f270472394e3d866820c631c8f3a8bfb3164a48a4e8dd54e1fc898823c1307dff7f8fe690fcbe7cad8703dcb667f82ac90be3478fa3e1

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      661de3e33880db5e921b9dca0bb9a936e5c8d33de5ee8e772488c7ff0166deb8

    • Size

      297KB

    • MD5

      ae75aa4d8441b62afba502edcc3396db

    • SHA1

      f22826f551493af0001bb6074bb0a06775955f7c

    • SHA256

      661de3e33880db5e921b9dca0bb9a936e5c8d33de5ee8e772488c7ff0166deb8

    • SHA512

      4db1ce64b7ade466d27f270472394e3d866820c631c8f3a8bfb3164a48a4e8dd54e1fc898823c1307dff7f8fe690fcbe7cad8703dcb667f82ac90be3478fa3e1

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks