General

  • Target

    501a5558b196dcfeb91878b8168d9711004c276623ed3fb8258c656e79b0c493

  • Size

    346KB

  • Sample

    241110-rzn86sygkc

  • MD5

    87d484122a8590a9556e236b891e750e

  • SHA1

    9bb49c8048291f2dabacf3bfadd9222dac8224cd

  • SHA256

    501a5558b196dcfeb91878b8168d9711004c276623ed3fb8258c656e79b0c493

  • SHA512

    9fec550494051129821963e676741e6d0e1f5e61c5ccf2d4eecc2116fd91f4341121b14dbd9d01a4069e325e8068760210401f1eea0cd0de9213e853a153114c

  • SSDEEP

    6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      501a5558b196dcfeb91878b8168d9711004c276623ed3fb8258c656e79b0c493

    • Size

      346KB

    • MD5

      87d484122a8590a9556e236b891e750e

    • SHA1

      9bb49c8048291f2dabacf3bfadd9222dac8224cd

    • SHA256

      501a5558b196dcfeb91878b8168d9711004c276623ed3fb8258c656e79b0c493

    • SHA512

      9fec550494051129821963e676741e6d0e1f5e61c5ccf2d4eecc2116fd91f4341121b14dbd9d01a4069e325e8068760210401f1eea0cd0de9213e853a153114c

    • SSDEEP

      6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks