General

  • Target

    6dc387909a980d14cf5bc3d913ba300609e807738c5bff84e5e851d80a245a11

  • Size

    423KB

  • Sample

    241111-j5gsaazlcm

  • MD5

    0ac1461ce4dda97e9712b2e5f01df4ec

  • SHA1

    cd4a5fda72706ef49ee355d283000394b0fc0304

  • SHA256

    6dc387909a980d14cf5bc3d913ba300609e807738c5bff84e5e851d80a245a11

  • SHA512

    9d3afdc7db7ebd0301657e8dce3460d9aedc9d41b67547d8ab042f7a4302a0db74f4ea5dc05ab636dad73a114372274209f518fdcce4018a6ac17b1aea5fc4db

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6dc387909a980d14cf5bc3d913ba300609e807738c5bff84e5e851d80a245a11

    • Size

      423KB

    • MD5

      0ac1461ce4dda97e9712b2e5f01df4ec

    • SHA1

      cd4a5fda72706ef49ee355d283000394b0fc0304

    • SHA256

      6dc387909a980d14cf5bc3d913ba300609e807738c5bff84e5e851d80a245a11

    • SHA512

      9d3afdc7db7ebd0301657e8dce3460d9aedc9d41b67547d8ab042f7a4302a0db74f4ea5dc05ab636dad73a114372274209f518fdcce4018a6ac17b1aea5fc4db

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks