General

  • Target

    c69a64546ef1d835115b8809b689ce00d82261d33846d309e3f193fc4b24a911

  • Size

    373KB

  • Sample

    241110-lsjgfstmgy

  • MD5

    ff041c86aa6f9748398d65413f5618b9

  • SHA1

    1831a8e05a985342d2b10fc208927064294b44b3

  • SHA256

    c69a64546ef1d835115b8809b689ce00d82261d33846d309e3f193fc4b24a911

  • SHA512

    ec6345faccd13d94b8d4f2a83caae0642db61257f9af0bb6cdd95ce3e12852bab8d2c0478786ee555fc519b007af2c46095cfb3bcbf9644cf6036b9e42b641a9

  • SSDEEP

    6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      c69a64546ef1d835115b8809b689ce00d82261d33846d309e3f193fc4b24a911

    • Size

      373KB

    • MD5

      ff041c86aa6f9748398d65413f5618b9

    • SHA1

      1831a8e05a985342d2b10fc208927064294b44b3

    • SHA256

      c69a64546ef1d835115b8809b689ce00d82261d33846d309e3f193fc4b24a911

    • SHA512

      ec6345faccd13d94b8d4f2a83caae0642db61257f9af0bb6cdd95ce3e12852bab8d2c0478786ee555fc519b007af2c46095cfb3bcbf9644cf6036b9e42b641a9

    • SSDEEP

      6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks