General

  • Target

    10e389976dadfb09530ad6265dbdcaa404a9dca4dd09b8e033e119e210a766c4

  • Size

    297KB

  • Sample

    241111-fknhjswrcr

  • MD5

    c3d143c627efd6ae95f29319b2d88523

  • SHA1

    6487615e0b554603042d26725275b9e352657972

  • SHA256

    10e389976dadfb09530ad6265dbdcaa404a9dca4dd09b8e033e119e210a766c4

  • SHA512

    8fc6a9e4bac8a86a0e4a33156996de06cbf7fa35f553bde3982a0914aefae8b207e841ccbb5953633d2e5c4b73f0fd6d8f7ed452e10cc6ca515c63555a46d692

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      10e389976dadfb09530ad6265dbdcaa404a9dca4dd09b8e033e119e210a766c4

    • Size

      297KB

    • MD5

      c3d143c627efd6ae95f29319b2d88523

    • SHA1

      6487615e0b554603042d26725275b9e352657972

    • SHA256

      10e389976dadfb09530ad6265dbdcaa404a9dca4dd09b8e033e119e210a766c4

    • SHA512

      8fc6a9e4bac8a86a0e4a33156996de06cbf7fa35f553bde3982a0914aefae8b207e841ccbb5953633d2e5c4b73f0fd6d8f7ed452e10cc6ca515c63555a46d692

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks