General

  • Target

    f00f735987af5c9d107354f5f702fb774287f82fba572398edeac251b0ce9ba7

  • Size

    297KB

  • Sample

    241110-rrysmsyeqh

  • MD5

    af5f9dbaed2d334355151f140beb18f6

  • SHA1

    8cecc4c2363f4e0ce711605fb0de7bd4828e7975

  • SHA256

    f00f735987af5c9d107354f5f702fb774287f82fba572398edeac251b0ce9ba7

  • SHA512

    f4c4d12243083b8fad7c8f740e83ac7d927d50b9b227a461dfd8863b7c4dff005edea9f35b36dc519876c2fb55e4c37e521dbcd948ab82ab22e210af676e20bd

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f00f735987af5c9d107354f5f702fb774287f82fba572398edeac251b0ce9ba7

    • Size

      297KB

    • MD5

      af5f9dbaed2d334355151f140beb18f6

    • SHA1

      8cecc4c2363f4e0ce711605fb0de7bd4828e7975

    • SHA256

      f00f735987af5c9d107354f5f702fb774287f82fba572398edeac251b0ce9ba7

    • SHA512

      f4c4d12243083b8fad7c8f740e83ac7d927d50b9b227a461dfd8863b7c4dff005edea9f35b36dc519876c2fb55e4c37e521dbcd948ab82ab22e210af676e20bd

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks