General

  • Target

    c0d788d7acc1f81b7e94857db440aa0804ae6ae8d88039b17d32e5a5b951c3cb

  • Size

    438KB

  • Sample

    241110-z3gmhavlfs

  • MD5

    a5205c93d6ff3a8923eb829f275cfff5

  • SHA1

    c5746259907ab0bd6e054b6dbe6fe655b8c08743

  • SHA256

    c0d788d7acc1f81b7e94857db440aa0804ae6ae8d88039b17d32e5a5b951c3cb

  • SHA512

    680998a1dad06a01a7368f7bcb28c41c97065e269a4c3cf4fecb60d771d06bbbc95c76243c5eb7e96a430a2c35244e993d569d7ff4e9f6eae0ea692d56e524d9

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      c0d788d7acc1f81b7e94857db440aa0804ae6ae8d88039b17d32e5a5b951c3cb

    • Size

      438KB

    • MD5

      a5205c93d6ff3a8923eb829f275cfff5

    • SHA1

      c5746259907ab0bd6e054b6dbe6fe655b8c08743

    • SHA256

      c0d788d7acc1f81b7e94857db440aa0804ae6ae8d88039b17d32e5a5b951c3cb

    • SHA512

      680998a1dad06a01a7368f7bcb28c41c97065e269a4c3cf4fecb60d771d06bbbc95c76243c5eb7e96a430a2c35244e993d569d7ff4e9f6eae0ea692d56e524d9

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks