General

  • Target

    ec6e4a8d7bcca83a9031c6b4bd35deda4af0aa77583a87915cf3a3e169c59dd0

  • Size

    427KB

  • Sample

    241110-y5b95athnn

  • MD5

    d5736948cf4ba19eae22b687652d480c

  • SHA1

    8673759144976e4d31801fe1d47813ebaeb4f727

  • SHA256

    ec6e4a8d7bcca83a9031c6b4bd35deda4af0aa77583a87915cf3a3e169c59dd0

  • SHA512

    57d20682eb5ae54068573defd35d532521ba6c0d5b53626b377696e106305b719607ee9f9b409cfb09a2a721ce98326710ce1d0da99daea568d7042570de64a0

  • SSDEEP

    6144:B0NMGv1CXJ7ATf6/5e2R98GDETSGhcTdzhSWa7OJ/thn/IyG8Fzk:BlGdICf6/5fvETSGhcTdzcWaAnAy0

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      ec6e4a8d7bcca83a9031c6b4bd35deda4af0aa77583a87915cf3a3e169c59dd0

    • Size

      427KB

    • MD5

      d5736948cf4ba19eae22b687652d480c

    • SHA1

      8673759144976e4d31801fe1d47813ebaeb4f727

    • SHA256

      ec6e4a8d7bcca83a9031c6b4bd35deda4af0aa77583a87915cf3a3e169c59dd0

    • SHA512

      57d20682eb5ae54068573defd35d532521ba6c0d5b53626b377696e106305b719607ee9f9b409cfb09a2a721ce98326710ce1d0da99daea568d7042570de64a0

    • SSDEEP

      6144:B0NMGv1CXJ7ATf6/5e2R98GDETSGhcTdzhSWa7OJ/thn/IyG8Fzk:BlGdICf6/5fvETSGhcTdzcWaAnAy0

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks