General

  • Target

    6b5e45b0340cda025cd46365e6a438a9a27d3ef527b297dd6c60cacd2f531a9f

  • Size

    423KB

  • Sample

    241111-afd6es1mhk

  • MD5

    c84c2add9ed0a3e659f77ec7cc235535

  • SHA1

    4c6436b5d910dac2b1d4b78aa7f9670973df51f4

  • SHA256

    6b5e45b0340cda025cd46365e6a438a9a27d3ef527b297dd6c60cacd2f531a9f

  • SHA512

    1badd1223a94105c5cc001ca4e86a57531a546a6d02ba9e20007067ffc383c14df9010471524f9140f294e1a9616a3844681a209c54553b32c76dc1e32ae501b

  • SSDEEP

    6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6b5e45b0340cda025cd46365e6a438a9a27d3ef527b297dd6c60cacd2f531a9f

    • Size

      423KB

    • MD5

      c84c2add9ed0a3e659f77ec7cc235535

    • SHA1

      4c6436b5d910dac2b1d4b78aa7f9670973df51f4

    • SHA256

      6b5e45b0340cda025cd46365e6a438a9a27d3ef527b297dd6c60cacd2f531a9f

    • SHA512

      1badd1223a94105c5cc001ca4e86a57531a546a6d02ba9e20007067ffc383c14df9010471524f9140f294e1a9616a3844681a209c54553b32c76dc1e32ae501b

    • SSDEEP

      6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks