General

  • Target

    d1bc2c1037f06d118572ffe20f8b32ffc72eedc39285baf5541d8ec2910f022e

  • Size

    370KB

  • Sample

    241111-c94dhsvjbp

  • MD5

    255fc32c349290bf25f1a24ae14b2ace

  • SHA1

    06788376bd4733ecbcf699f6d9056b58fcdf5f28

  • SHA256

    d1bc2c1037f06d118572ffe20f8b32ffc72eedc39285baf5541d8ec2910f022e

  • SHA512

    405af8522b59f54d76fcb93d1a54a33500b4e8cc3a7ebe956a5d44aaf0bafee42284681a7b45b77fdb3780a59f46e06904125ec43163e0e07c8172562d3b5a7e

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d1bc2c1037f06d118572ffe20f8b32ffc72eedc39285baf5541d8ec2910f022e

    • Size

      370KB

    • MD5

      255fc32c349290bf25f1a24ae14b2ace

    • SHA1

      06788376bd4733ecbcf699f6d9056b58fcdf5f28

    • SHA256

      d1bc2c1037f06d118572ffe20f8b32ffc72eedc39285baf5541d8ec2910f022e

    • SHA512

      405af8522b59f54d76fcb93d1a54a33500b4e8cc3a7ebe956a5d44aaf0bafee42284681a7b45b77fdb3780a59f46e06904125ec43163e0e07c8172562d3b5a7e

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks