General

  • Target

    c80334970c70bf77cfdb102a19a0607b76ad9fb5ed0fcbe4a092356dd4b9bfe6

  • Size

    438KB

  • Sample

    241110-k86q9atern

  • MD5

    0088938cb90cd4f8db727d347e871975

  • SHA1

    7ab28f66f76644677eb5da27436dfaec651e7136

  • SHA256

    c80334970c70bf77cfdb102a19a0607b76ad9fb5ed0fcbe4a092356dd4b9bfe6

  • SHA512

    d4ca019f81a9fd47939335f24cbd78841c0bd7376b2908cf7ca868fe1644e57f3d21a464f1a5d090c4e6a3547187f0a897f299647b8c1fbe42a941795313c96c

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      c80334970c70bf77cfdb102a19a0607b76ad9fb5ed0fcbe4a092356dd4b9bfe6

    • Size

      438KB

    • MD5

      0088938cb90cd4f8db727d347e871975

    • SHA1

      7ab28f66f76644677eb5da27436dfaec651e7136

    • SHA256

      c80334970c70bf77cfdb102a19a0607b76ad9fb5ed0fcbe4a092356dd4b9bfe6

    • SHA512

      d4ca019f81a9fd47939335f24cbd78841c0bd7376b2908cf7ca868fe1644e57f3d21a464f1a5d090c4e6a3547187f0a897f299647b8c1fbe42a941795313c96c

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks