General

  • Target

    a379b870fc8d0209835be185d7bf41ffb39902c39f610abfc895ec6f127422b8

  • Size

    297KB

  • Sample

    241110-mdx7qsxrdk

  • MD5

    dd2974c3434f742d4b802a37491abb3a

  • SHA1

    254daaa532dceb8ee9f225fad629addebddbe43e

  • SHA256

    a379b870fc8d0209835be185d7bf41ffb39902c39f610abfc895ec6f127422b8

  • SHA512

    feda123f6f2fb19452db8a2d8484e5740bb9c384c87062722700e8e29703e308e741e940d530001d0fa0736d732b546b7c3e50a43404f5adc2e893d97bf37c5b

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      a379b870fc8d0209835be185d7bf41ffb39902c39f610abfc895ec6f127422b8

    • Size

      297KB

    • MD5

      dd2974c3434f742d4b802a37491abb3a

    • SHA1

      254daaa532dceb8ee9f225fad629addebddbe43e

    • SHA256

      a379b870fc8d0209835be185d7bf41ffb39902c39f610abfc895ec6f127422b8

    • SHA512

      feda123f6f2fb19452db8a2d8484e5740bb9c384c87062722700e8e29703e308e741e940d530001d0fa0736d732b546b7c3e50a43404f5adc2e893d97bf37c5b

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks