General

  • Target

    a2389cd090a76e02f23822a0e9b4fb8524395340a502d1e480786b85bacb5cce

  • Size

    371KB

  • Sample

    241110-cv736axfnb

  • MD5

    d6fe3786e731213d6275fd9c9f1f2874

  • SHA1

    ce70fc7fcd6adc5bb1263429c969d6c7d268bb6b

  • SHA256

    a2389cd090a76e02f23822a0e9b4fb8524395340a502d1e480786b85bacb5cce

  • SHA512

    91ccd72a73ab092209ff5888f933350ff4bde35b7358561c16fe0187e93cfae16a7904b808305186af01e06f772124ccea5e6dd063f1277c78d35e8b9bc36f27

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a2389cd090a76e02f23822a0e9b4fb8524395340a502d1e480786b85bacb5cce

    • Size

      371KB

    • MD5

      d6fe3786e731213d6275fd9c9f1f2874

    • SHA1

      ce70fc7fcd6adc5bb1263429c969d6c7d268bb6b

    • SHA256

      a2389cd090a76e02f23822a0e9b4fb8524395340a502d1e480786b85bacb5cce

    • SHA512

      91ccd72a73ab092209ff5888f933350ff4bde35b7358561c16fe0187e93cfae16a7904b808305186af01e06f772124ccea5e6dd063f1277c78d35e8b9bc36f27

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks