General

  • Target

    6b12cb37a6a3b96a25e971624888334b2cf5c5faf25ea9e97a03ae73dbbdd14e

  • Size

    298KB

  • Sample

    241110-nnmdnawekc

  • MD5

    bbf132b36e77c79be1aa53c03e51a733

  • SHA1

    7a6e71c0d81adcad7462522e82f01d9e005e2434

  • SHA256

    6b12cb37a6a3b96a25e971624888334b2cf5c5faf25ea9e97a03ae73dbbdd14e

  • SHA512

    3f9c366d9e509ea061e1cc1fe80287487b75877821fee6bd2b98e35b14c6024c6c034b49071953ae5570334ff5541e46161ac5e57d4b131b908010b1f9772742

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6b12cb37a6a3b96a25e971624888334b2cf5c5faf25ea9e97a03ae73dbbdd14e

    • Size

      298KB

    • MD5

      bbf132b36e77c79be1aa53c03e51a733

    • SHA1

      7a6e71c0d81adcad7462522e82f01d9e005e2434

    • SHA256

      6b12cb37a6a3b96a25e971624888334b2cf5c5faf25ea9e97a03ae73dbbdd14e

    • SHA512

      3f9c366d9e509ea061e1cc1fe80287487b75877821fee6bd2b98e35b14c6024c6c034b49071953ae5570334ff5541e46161ac5e57d4b131b908010b1f9772742

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks