General

  • Target

    28311e273ab7909d392e30d2f9d11f3887bdf703252eda11d02df48a95232374

  • Size

    428KB

  • Sample

    241110-gckx5azpcw

  • MD5

    aa12650798875cf522a0dee2ffcc872c

  • SHA1

    ccad0c5890e9d2015118ab65292fb339413a95e1

  • SHA256

    28311e273ab7909d392e30d2f9d11f3887bdf703252eda11d02df48a95232374

  • SHA512

    6ed81f09cd78718fe5affb1d40b619e6b3b9b5538cddd7603e0664e927720afd14e8c5f58e1d488d4fa91ec27a3db2536ff4f00667030fba131de4029f27b93d

  • SSDEEP

    6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      28311e273ab7909d392e30d2f9d11f3887bdf703252eda11d02df48a95232374

    • Size

      428KB

    • MD5

      aa12650798875cf522a0dee2ffcc872c

    • SHA1

      ccad0c5890e9d2015118ab65292fb339413a95e1

    • SHA256

      28311e273ab7909d392e30d2f9d11f3887bdf703252eda11d02df48a95232374

    • SHA512

      6ed81f09cd78718fe5affb1d40b619e6b3b9b5538cddd7603e0664e927720afd14e8c5f58e1d488d4fa91ec27a3db2536ff4f00667030fba131de4029f27b93d

    • SSDEEP

      6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks