General

  • Target

    ae7751b9d0d1c90bcca58662a3cdc33368da725098a0a3d53691d12b4054e075

  • Size

    442KB

  • Sample

    241111-h6m51swcja

  • MD5

    8863d94eacb3541dd274015f75780ad8

  • SHA1

    32c4e45f4218c275723a9bace5c53d8266ef0c6e

  • SHA256

    ae7751b9d0d1c90bcca58662a3cdc33368da725098a0a3d53691d12b4054e075

  • SHA512

    f5fe67febee3f085fc09d784c0395382edea3692ed1c940882994246b6db062fa320ab91061e5ce741294a780945213e7cbd8b06032d088f841b1de553954b90

  • SSDEEP

    6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      ae7751b9d0d1c90bcca58662a3cdc33368da725098a0a3d53691d12b4054e075

    • Size

      442KB

    • MD5

      8863d94eacb3541dd274015f75780ad8

    • SHA1

      32c4e45f4218c275723a9bace5c53d8266ef0c6e

    • SHA256

      ae7751b9d0d1c90bcca58662a3cdc33368da725098a0a3d53691d12b4054e075

    • SHA512

      f5fe67febee3f085fc09d784c0395382edea3692ed1c940882994246b6db062fa320ab91061e5ce741294a780945213e7cbd8b06032d088f841b1de553954b90

    • SSDEEP

      6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks