General

  • Target

    f2d8d5e841132645c83444beaa979f8112baf44e8d8e068fbf2d86920e5b99c0

  • Size

    297KB

  • Sample

    241111-gat31svamb

  • MD5

    dfb0b70e78d2ffcf2f0bfec644cf3b0e

  • SHA1

    6e6c40344b7a37c872d068f78da428bd1ec8154e

  • SHA256

    f2d8d5e841132645c83444beaa979f8112baf44e8d8e068fbf2d86920e5b99c0

  • SHA512

    7579136d1c56a0a625bc53b06c3fe0c8ed0aad3cc827f771a133c8c3ecbd3a6e78ff171b83fe58f1efff2c1510daab9ebe31b6f204d1aa900892aba8f304889e

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f2d8d5e841132645c83444beaa979f8112baf44e8d8e068fbf2d86920e5b99c0

    • Size

      297KB

    • MD5

      dfb0b70e78d2ffcf2f0bfec644cf3b0e

    • SHA1

      6e6c40344b7a37c872d068f78da428bd1ec8154e

    • SHA256

      f2d8d5e841132645c83444beaa979f8112baf44e8d8e068fbf2d86920e5b99c0

    • SHA512

      7579136d1c56a0a625bc53b06c3fe0c8ed0aad3cc827f771a133c8c3ecbd3a6e78ff171b83fe58f1efff2c1510daab9ebe31b6f204d1aa900892aba8f304889e

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks