General

  • Target

    6895479248375b7688d56c9ff39e4d5f66e5dd0858780bbea4f1699957642463

  • Size

    383KB

  • Sample

    241111-f6p89ssrfz

  • MD5

    824b8709e17e71577d38619e73a803b5

  • SHA1

    6b5cddcf92bf07d94e0f0056f8e8597e9a017d5b

  • SHA256

    6895479248375b7688d56c9ff39e4d5f66e5dd0858780bbea4f1699957642463

  • SHA512

    9e34ca49975fb2203a773fa94c7fdce6d0509e526c4d5ec527a5b1ac8819161753145cb56a6f0d4ab1d1c194488a67d542ba60296d55956d1ff238c96cafc7b4

  • SSDEEP

    6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6895479248375b7688d56c9ff39e4d5f66e5dd0858780bbea4f1699957642463

    • Size

      383KB

    • MD5

      824b8709e17e71577d38619e73a803b5

    • SHA1

      6b5cddcf92bf07d94e0f0056f8e8597e9a017d5b

    • SHA256

      6895479248375b7688d56c9ff39e4d5f66e5dd0858780bbea4f1699957642463

    • SHA512

      9e34ca49975fb2203a773fa94c7fdce6d0509e526c4d5ec527a5b1ac8819161753145cb56a6f0d4ab1d1c194488a67d542ba60296d55956d1ff238c96cafc7b4

    • SSDEEP

      6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks