General

  • Target

    6995c743ab823ec0454860e632f8a22697a4c5843b887abaebb87ca9c48fe118

  • Size

    438KB

  • Sample

    241110-y84hsatngt

  • MD5

    77d09b0af91111b3103d1458b1cb1afd

  • SHA1

    6f3b382a6b151dd206e1cd58c4d66bbe2d67d523

  • SHA256

    6995c743ab823ec0454860e632f8a22697a4c5843b887abaebb87ca9c48fe118

  • SHA512

    fd438db5ef3fe2f368ef04310fdb058a1a4f3de1e449eff3457fb8e110fb47fb719bf1fc6753af062ad7317bd500aa20b7c60aa603ffbe75383a9d4452908934

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6995c743ab823ec0454860e632f8a22697a4c5843b887abaebb87ca9c48fe118

    • Size

      438KB

    • MD5

      77d09b0af91111b3103d1458b1cb1afd

    • SHA1

      6f3b382a6b151dd206e1cd58c4d66bbe2d67d523

    • SHA256

      6995c743ab823ec0454860e632f8a22697a4c5843b887abaebb87ca9c48fe118

    • SHA512

      fd438db5ef3fe2f368ef04310fdb058a1a4f3de1e449eff3457fb8e110fb47fb719bf1fc6753af062ad7317bd500aa20b7c60aa603ffbe75383a9d4452908934

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks