General

  • Target

    560e6e22357c7775e5df49d80e75898163e9ea55fcb74055a116d354e5bbf434

  • Size

    438KB

  • Sample

    241111-dshadssbjg

  • MD5

    4735dc7ded066b460f3bef1ab455044f

  • SHA1

    d4efb97ea3fe2dcac63c1c1eb818cf03724c3168

  • SHA256

    560e6e22357c7775e5df49d80e75898163e9ea55fcb74055a116d354e5bbf434

  • SHA512

    66f4b37a1eebbbccef9eb749ca2cd6fea2e92c2c6226a3435af1f111166cdb40b2da6f3effeb1aa9c35a45f2cb6af64f79d8e18bbd3cf8e37cd6e389465476fe

  • SSDEEP

    12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      560e6e22357c7775e5df49d80e75898163e9ea55fcb74055a116d354e5bbf434

    • Size

      438KB

    • MD5

      4735dc7ded066b460f3bef1ab455044f

    • SHA1

      d4efb97ea3fe2dcac63c1c1eb818cf03724c3168

    • SHA256

      560e6e22357c7775e5df49d80e75898163e9ea55fcb74055a116d354e5bbf434

    • SHA512

      66f4b37a1eebbbccef9eb749ca2cd6fea2e92c2c6226a3435af1f111166cdb40b2da6f3effeb1aa9c35a45f2cb6af64f79d8e18bbd3cf8e37cd6e389465476fe

    • SSDEEP

      12288:wqkdKtC4xiAqjop8iDPRSRjAHzi5nHbZRK8nPyy3eBPno:1cqxx1p8LK8KQc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks