General

  • Target

    522869cf4a4cfc0175bc525cf82a6c8e8b84806434d6bc5658499914cb578f11

  • Size

    297KB

  • Sample

    241110-wb1dra1mas

  • MD5

    db404e7807666264262697f9e44dd667

  • SHA1

    59f9883c1f6ad54baa6e549db537ab88beb7a090

  • SHA256

    522869cf4a4cfc0175bc525cf82a6c8e8b84806434d6bc5658499914cb578f11

  • SHA512

    bd406ade00eed21dc0b919a4d7f2f34521139d200b1fafa3fe4550bc8c3fdec52cb6568e608dc3e87b64446fc7fbc2db5ef862f55efa040afa01e6e7728c09ca

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      522869cf4a4cfc0175bc525cf82a6c8e8b84806434d6bc5658499914cb578f11

    • Size

      297KB

    • MD5

      db404e7807666264262697f9e44dd667

    • SHA1

      59f9883c1f6ad54baa6e549db537ab88beb7a090

    • SHA256

      522869cf4a4cfc0175bc525cf82a6c8e8b84806434d6bc5658499914cb578f11

    • SHA512

      bd406ade00eed21dc0b919a4d7f2f34521139d200b1fafa3fe4550bc8c3fdec52cb6568e608dc3e87b64446fc7fbc2db5ef862f55efa040afa01e6e7728c09ca

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks