General

  • Target

    266fa4abf27e1627995405da4a806c8304b190444599de134e642c54956796b8

  • Size

    297KB

  • Sample

    241110-n8ty8szjfq

  • MD5

    d6dfbc84d9f9b054f5d544d0a409c81e

  • SHA1

    a5c137b890eb25b7fa81ac95244fa1dd005585f8

  • SHA256

    266fa4abf27e1627995405da4a806c8304b190444599de134e642c54956796b8

  • SHA512

    d1ccdcadeb7fd53cc5c787a4fdabe3e17b8f25d28fc98b832cc2bec6107764e9abcdca21dd62f38a5bd76cebfba035f9055b7416b68b32bc49c030c0d3ca8e1c

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      266fa4abf27e1627995405da4a806c8304b190444599de134e642c54956796b8

    • Size

      297KB

    • MD5

      d6dfbc84d9f9b054f5d544d0a409c81e

    • SHA1

      a5c137b890eb25b7fa81ac95244fa1dd005585f8

    • SHA256

      266fa4abf27e1627995405da4a806c8304b190444599de134e642c54956796b8

    • SHA512

      d1ccdcadeb7fd53cc5c787a4fdabe3e17b8f25d28fc98b832cc2bec6107764e9abcdca21dd62f38a5bd76cebfba035f9055b7416b68b32bc49c030c0d3ca8e1c

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks