General

  • Target

    b9d876377be1d63b28aa53c400edf0998bfec084c02b9f22764b9a76b819ac99

  • Size

    371KB

  • Sample

    241110-lnyqksvbpe

  • MD5

    e0b6207f561da98cb6e2115740f53077

  • SHA1

    c0e00e29b46aad6ae79f432cb50ac2ab05696f0d

  • SHA256

    b9d876377be1d63b28aa53c400edf0998bfec084c02b9f22764b9a76b819ac99

  • SHA512

    fdcb160976a02377fa0e345b81509f9d76683279dbb91b8c1db4c38a6bd1bf142c3cd379ecc3949292a3f1eb0d706620b244ae2bae5649c0389142733ceabd31

  • SSDEEP

    6144:K5T6cP+DC7WJrK3tg4LobitExnGRZyodb7ITsqXigaXwVfh:K5T6cEKWJMW7GR5h7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      b9d876377be1d63b28aa53c400edf0998bfec084c02b9f22764b9a76b819ac99

    • Size

      371KB

    • MD5

      e0b6207f561da98cb6e2115740f53077

    • SHA1

      c0e00e29b46aad6ae79f432cb50ac2ab05696f0d

    • SHA256

      b9d876377be1d63b28aa53c400edf0998bfec084c02b9f22764b9a76b819ac99

    • SHA512

      fdcb160976a02377fa0e345b81509f9d76683279dbb91b8c1db4c38a6bd1bf142c3cd379ecc3949292a3f1eb0d706620b244ae2bae5649c0389142733ceabd31

    • SSDEEP

      6144:K5T6cP+DC7WJrK3tg4LobitExnGRZyodb7ITsqXigaXwVfh:K5T6cEKWJMW7GR5h7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks