General

  • Target

    1908d4887bb687c83b8ed4eafccfe9e5d77f05d2d8a14adfb3ff85cbdab1bd70

  • Size

    346KB

  • Sample

    241110-t1qjqszhpq

  • MD5

    ad84e995b95cec048673149f69b243c6

  • SHA1

    c1369521167e46bfd443446f203651aa36229018

  • SHA256

    1908d4887bb687c83b8ed4eafccfe9e5d77f05d2d8a14adfb3ff85cbdab1bd70

  • SHA512

    bad84c3c986703c3e93a8cf6ddb51d0c7f7b915ce3361bf1a9b8c0d52a9552c7dbd66ca55404ba7e185c9f31f2a4a0439f8e738cc4217ac013abe2f03f6dbb6d

  • SSDEEP

    6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      1908d4887bb687c83b8ed4eafccfe9e5d77f05d2d8a14adfb3ff85cbdab1bd70

    • Size

      346KB

    • MD5

      ad84e995b95cec048673149f69b243c6

    • SHA1

      c1369521167e46bfd443446f203651aa36229018

    • SHA256

      1908d4887bb687c83b8ed4eafccfe9e5d77f05d2d8a14adfb3ff85cbdab1bd70

    • SHA512

      bad84c3c986703c3e93a8cf6ddb51d0c7f7b915ce3361bf1a9b8c0d52a9552c7dbd66ca55404ba7e185c9f31f2a4a0439f8e738cc4217ac013abe2f03f6dbb6d

    • SSDEEP

      6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks