General

  • Target

    ba3a8c104be10773c6fa3a744b36cb7f5f1a75a8f848dac32a6bc79180cc9946

  • Size

    427KB

  • Sample

    241110-k3rp5stjew

  • MD5

    355dc3aa7343a792d1f05bce2b218290

  • SHA1

    99cafc79272ed31424528639b7096421ff07972b

  • SHA256

    ba3a8c104be10773c6fa3a744b36cb7f5f1a75a8f848dac32a6bc79180cc9946

  • SHA512

    96f5bbad7cd14f57a8297ca6d0bcb03f8e2ff6eca9f457b83a485afeb907533f00dda302fb302564e8438ec8f087607ced552172480b3a4bf5320b70fcfbbc06

  • SSDEEP

    6144:XxnVbTjtyULhQVfiYUbqBAXdfWe22Yi5/L/ngOBWJfr1PqaRJ0:XxVbsgcinqBAXNT22Yi5/L/n6r1Pq

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      ba3a8c104be10773c6fa3a744b36cb7f5f1a75a8f848dac32a6bc79180cc9946

    • Size

      427KB

    • MD5

      355dc3aa7343a792d1f05bce2b218290

    • SHA1

      99cafc79272ed31424528639b7096421ff07972b

    • SHA256

      ba3a8c104be10773c6fa3a744b36cb7f5f1a75a8f848dac32a6bc79180cc9946

    • SHA512

      96f5bbad7cd14f57a8297ca6d0bcb03f8e2ff6eca9f457b83a485afeb907533f00dda302fb302564e8438ec8f087607ced552172480b3a4bf5320b70fcfbbc06

    • SSDEEP

      6144:XxnVbTjtyULhQVfiYUbqBAXdfWe22Yi5/L/ngOBWJfr1PqaRJ0:XxVbsgcinqBAXNT22Yi5/L/n6r1Pq

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks