General

  • Target

    c3ae967ee56e72a79267cd181d405e8a22d7c50ccba7caa42a69736564f56e18

  • Size

    371KB

  • Sample

    241110-sgykkaygnk

  • MD5

    510be0814f0f855a744fcb4ddd9ed39c

  • SHA1

    1cf9d5afeda55f1e8a3536fd94d70ef612b3ad99

  • SHA256

    c3ae967ee56e72a79267cd181d405e8a22d7c50ccba7caa42a69736564f56e18

  • SHA512

    64024f3482ad77eba74dae308a21a85e2bef04eb3b52ac4d8f027b14d6eef4486f2eb6eb8a7ce2e8c17b735210cf9ae5bf3470f0db5e28ad05e8ee96ac4f786e

  • SSDEEP

    6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      c3ae967ee56e72a79267cd181d405e8a22d7c50ccba7caa42a69736564f56e18

    • Size

      371KB

    • MD5

      510be0814f0f855a744fcb4ddd9ed39c

    • SHA1

      1cf9d5afeda55f1e8a3536fd94d70ef612b3ad99

    • SHA256

      c3ae967ee56e72a79267cd181d405e8a22d7c50ccba7caa42a69736564f56e18

    • SHA512

      64024f3482ad77eba74dae308a21a85e2bef04eb3b52ac4d8f027b14d6eef4486f2eb6eb8a7ce2e8c17b735210cf9ae5bf3470f0db5e28ad05e8ee96ac4f786e

    • SSDEEP

      6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks