General

  • Target

    81dd6c45aaa8432e03f7f6608ff9deaa85083691bf73628319babea870280acf

  • Size

    346KB

  • Sample

    241110-vzvmqs1ekq

  • MD5

    c0c8334392267be5dfbf002e8f4a6381

  • SHA1

    aea040b3cff5194bf4c9f22bf0e4a4cb91df5572

  • SHA256

    81dd6c45aaa8432e03f7f6608ff9deaa85083691bf73628319babea870280acf

  • SHA512

    d528e95b8f98b4378e0acce899f4cc43f062c999635a16282edc74bb97607fe8e0c65eea1334bcaba0f2925b50948bf16356abe20df45735bf182fe85c9e4a5c

  • SSDEEP

    6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      81dd6c45aaa8432e03f7f6608ff9deaa85083691bf73628319babea870280acf

    • Size

      346KB

    • MD5

      c0c8334392267be5dfbf002e8f4a6381

    • SHA1

      aea040b3cff5194bf4c9f22bf0e4a4cb91df5572

    • SHA256

      81dd6c45aaa8432e03f7f6608ff9deaa85083691bf73628319babea870280acf

    • SHA512

      d528e95b8f98b4378e0acce899f4cc43f062c999635a16282edc74bb97607fe8e0c65eea1334bcaba0f2925b50948bf16356abe20df45735bf182fe85c9e4a5c

    • SSDEEP

      6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks