General

  • Target

    098e20f952f89dd34e5f7dd3abbe0dac0477fcc8e001ed41ec1a05621327c42d

  • Size

    371KB

  • Sample

    241111-gzrdesxqhm

  • MD5

    d62639a05643f18f989c260f172da075

  • SHA1

    169e2cd50796970c422f4f64d3528c68da2c21fa

  • SHA256

    098e20f952f89dd34e5f7dd3abbe0dac0477fcc8e001ed41ec1a05621327c42d

  • SHA512

    fa042cb188a655ecb50cf2cfc04249643063334b64c9e1cc6c01a05a8cc74d565d63b5a7fe86a518dcffc6d6b725f4ebd220fc9177d1cf47468b87c8ed70c23f

  • SSDEEP

    6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      098e20f952f89dd34e5f7dd3abbe0dac0477fcc8e001ed41ec1a05621327c42d

    • Size

      371KB

    • MD5

      d62639a05643f18f989c260f172da075

    • SHA1

      169e2cd50796970c422f4f64d3528c68da2c21fa

    • SHA256

      098e20f952f89dd34e5f7dd3abbe0dac0477fcc8e001ed41ec1a05621327c42d

    • SHA512

      fa042cb188a655ecb50cf2cfc04249643063334b64c9e1cc6c01a05a8cc74d565d63b5a7fe86a518dcffc6d6b725f4ebd220fc9177d1cf47468b87c8ed70c23f

    • SSDEEP

      6144:2KcBXUzYzqHOghMIZkZ9UNA2jnN2/u/6dLob7ITsqXigaXwVfi:2KcBXUzLHOgUWnN2m+87R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks