General

  • Target

    bde354487caa92e5b2832fa0e80891337322a38f6882b01db1b2fa99da9d1864

  • Size

    297KB

  • Sample

    241110-kst3hswqgn

  • MD5

    85785a6129b1dfd08b2295d650297f2d

  • SHA1

    b2c27191386c2cf423002e7c2312298c48751c3a

  • SHA256

    bde354487caa92e5b2832fa0e80891337322a38f6882b01db1b2fa99da9d1864

  • SHA512

    31852f1428aea4295dfa0e12768afc2ad3dba9b42978229e13fe606496a7c91dc962d155c40f7b4ca17911741d4d342b31ebe2113b293e920c5098d6fde9b622

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      bde354487caa92e5b2832fa0e80891337322a38f6882b01db1b2fa99da9d1864

    • Size

      297KB

    • MD5

      85785a6129b1dfd08b2295d650297f2d

    • SHA1

      b2c27191386c2cf423002e7c2312298c48751c3a

    • SHA256

      bde354487caa92e5b2832fa0e80891337322a38f6882b01db1b2fa99da9d1864

    • SHA512

      31852f1428aea4295dfa0e12768afc2ad3dba9b42978229e13fe606496a7c91dc962d155c40f7b4ca17911741d4d342b31ebe2113b293e920c5098d6fde9b622

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks