General

  • Target

    d371837d9b77db171c09b555d4611de1f7e87cdbb0edc90507b3c55e8b239a2d

  • Size

    423KB

  • Sample

    241111-endxvasdrp

  • MD5

    1b09893fb431b76c00f45e15d7121950

  • SHA1

    c1f86b5ff0001b7b9db9892c35ba904837590edc

  • SHA256

    d371837d9b77db171c09b555d4611de1f7e87cdbb0edc90507b3c55e8b239a2d

  • SHA512

    f63e475e10511cc2e96be6dce495a0a6248f941517de3b88f5438a63d1c6d3670991b8d5db365e65623be1b55ce3779fd07f257971a20b94faadf8c49f1175a3

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d371837d9b77db171c09b555d4611de1f7e87cdbb0edc90507b3c55e8b239a2d

    • Size

      423KB

    • MD5

      1b09893fb431b76c00f45e15d7121950

    • SHA1

      c1f86b5ff0001b7b9db9892c35ba904837590edc

    • SHA256

      d371837d9b77db171c09b555d4611de1f7e87cdbb0edc90507b3c55e8b239a2d

    • SHA512

      f63e475e10511cc2e96be6dce495a0a6248f941517de3b88f5438a63d1c6d3670991b8d5db365e65623be1b55ce3779fd07f257971a20b94faadf8c49f1175a3

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks