General

  • Target

    567a41ca3860d5a9f984cf27ab162c834038b746aa8c5ddd9b2d7d544d862854

  • Size

    370KB

  • Sample

    241110-g3ya5s1gqc

  • MD5

    8dacffc40c30904cd6741e2ec60dc8c3

  • SHA1

    3f8dd9fe2b6198c0245c51033866a3902f6d7cfe

  • SHA256

    567a41ca3860d5a9f984cf27ab162c834038b746aa8c5ddd9b2d7d544d862854

  • SHA512

    24039ca92ff00c5b57c7f658a6943b0c0f24b0590bdf6c94717b5104d98f8ef24f664eb44732e8ff905091935c9ddae1114f46564dba20f4de165e4ab6239e74

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      567a41ca3860d5a9f984cf27ab162c834038b746aa8c5ddd9b2d7d544d862854

    • Size

      370KB

    • MD5

      8dacffc40c30904cd6741e2ec60dc8c3

    • SHA1

      3f8dd9fe2b6198c0245c51033866a3902f6d7cfe

    • SHA256

      567a41ca3860d5a9f984cf27ab162c834038b746aa8c5ddd9b2d7d544d862854

    • SHA512

      24039ca92ff00c5b57c7f658a6943b0c0f24b0590bdf6c94717b5104d98f8ef24f664eb44732e8ff905091935c9ddae1114f46564dba20f4de165e4ab6239e74

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks