General

  • Target

    410f9badc069f8ec73bc5dc2573c01c89920821952640be94c3d680f2fcba89c

  • Size

    297KB

  • Sample

    241111-brwehsymcy

  • MD5

    61227da73306e6f18ed78b8fbd401cb9

  • SHA1

    5ccb2fdb1beb3124fbc6629e4da4ab82cab5ecdf

  • SHA256

    410f9badc069f8ec73bc5dc2573c01c89920821952640be94c3d680f2fcba89c

  • SHA512

    341c05fe9c05c448817e2da8b47f93c6050b06b4c2105c5657b8b1c145af5ffaaffd4e64f7f6aebd55c447c34fc26cea59e8b0513d5d409bce091ae191178537

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      410f9badc069f8ec73bc5dc2573c01c89920821952640be94c3d680f2fcba89c

    • Size

      297KB

    • MD5

      61227da73306e6f18ed78b8fbd401cb9

    • SHA1

      5ccb2fdb1beb3124fbc6629e4da4ab82cab5ecdf

    • SHA256

      410f9badc069f8ec73bc5dc2573c01c89920821952640be94c3d680f2fcba89c

    • SHA512

      341c05fe9c05c448817e2da8b47f93c6050b06b4c2105c5657b8b1c145af5ffaaffd4e64f7f6aebd55c447c34fc26cea59e8b0513d5d409bce091ae191178537

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks