General

  • Target

    ed4cc47ce6676923438f5240ef04b19972603ae7842d68444231e21b20eeffb6

  • Size

    373KB

  • Sample

    241110-zcaq9svdpc

  • MD5

    c9e5e1a4ed2cb34268592ea87688a989

  • SHA1

    e94ec32baf4367bfd1b0df24c4cfb9f0321ef365

  • SHA256

    ed4cc47ce6676923438f5240ef04b19972603ae7842d68444231e21b20eeffb6

  • SHA512

    305224e50e851b02b64354624b9c2c70bce3bdd02a68d7b671c8eb144d0dfcf2f77f46758e5f62327e8cc7e1bdfdea62e82c77f3b711b0124146e3fa709cc7e7

  • SSDEEP

    6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      ed4cc47ce6676923438f5240ef04b19972603ae7842d68444231e21b20eeffb6

    • Size

      373KB

    • MD5

      c9e5e1a4ed2cb34268592ea87688a989

    • SHA1

      e94ec32baf4367bfd1b0df24c4cfb9f0321ef365

    • SHA256

      ed4cc47ce6676923438f5240ef04b19972603ae7842d68444231e21b20eeffb6

    • SHA512

      305224e50e851b02b64354624b9c2c70bce3bdd02a68d7b671c8eb144d0dfcf2f77f46758e5f62327e8cc7e1bdfdea62e82c77f3b711b0124146e3fa709cc7e7

    • SSDEEP

      6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks