General

  • Target

    8ca0b0df5a613841aa5fc271c4f2b069183af61fe5c0f6d6227d9ed3e2a22c63

  • Size

    298KB

  • Sample

    241110-nwy3eswfqa

  • MD5

    22b7927b298a2ea2be37d5fbe6f69017

  • SHA1

    2bf1296a09c0fcc0e6c7e036b4a5f36354f25dba

  • SHA256

    8ca0b0df5a613841aa5fc271c4f2b069183af61fe5c0f6d6227d9ed3e2a22c63

  • SHA512

    e3b502ed44ac396544d8e40e6585b17c513aae6c1edf0b66f914dc28b792cd5911e3678637a2cdf5b1a5cba26dadccd665266468714e1a0ddef117911e97f9eb

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      8ca0b0df5a613841aa5fc271c4f2b069183af61fe5c0f6d6227d9ed3e2a22c63

    • Size

      298KB

    • MD5

      22b7927b298a2ea2be37d5fbe6f69017

    • SHA1

      2bf1296a09c0fcc0e6c7e036b4a5f36354f25dba

    • SHA256

      8ca0b0df5a613841aa5fc271c4f2b069183af61fe5c0f6d6227d9ed3e2a22c63

    • SHA512

      e3b502ed44ac396544d8e40e6585b17c513aae6c1edf0b66f914dc28b792cd5911e3678637a2cdf5b1a5cba26dadccd665266468714e1a0ddef117911e97f9eb

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks