General

  • Target

    38a2e2c1ae10799251a6c3ad932d2a5837771d30127790fb3c85e1a133477392

  • Size

    373KB

  • Sample

    241111-dfn76s1drj

  • MD5

    0d1d1b1e32b86fc325da3733832d2bab

  • SHA1

    637f3d960d8d3e2a34428ae49f6d1181740aca99

  • SHA256

    38a2e2c1ae10799251a6c3ad932d2a5837771d30127790fb3c85e1a133477392

  • SHA512

    ddbbc1c80caad41c7ab1efd9530cc5f21ba4450170560f234441b249915cc79e7bf1aaf6f726ebea72ee4558e5ec4879ed2efa6710f961ff043061d682b92c1d

  • SSDEEP

    6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      38a2e2c1ae10799251a6c3ad932d2a5837771d30127790fb3c85e1a133477392

    • Size

      373KB

    • MD5

      0d1d1b1e32b86fc325da3733832d2bab

    • SHA1

      637f3d960d8d3e2a34428ae49f6d1181740aca99

    • SHA256

      38a2e2c1ae10799251a6c3ad932d2a5837771d30127790fb3c85e1a133477392

    • SHA512

      ddbbc1c80caad41c7ab1efd9530cc5f21ba4450170560f234441b249915cc79e7bf1aaf6f726ebea72ee4558e5ec4879ed2efa6710f961ff043061d682b92c1d

    • SSDEEP

      6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks