General

  • Target

    d53d7a3f7755dadc6f46eacc00494882222a9ea82b695116777b41fc2b8aaf7a

  • Size

    371KB

  • Sample

    241111-jxk5qszkbk

  • MD5

    ff8fa701d2186e1a6253c520528806cd

  • SHA1

    d4611dc0f0d260856a80035c3b7f01d1a68460eb

  • SHA256

    d53d7a3f7755dadc6f46eacc00494882222a9ea82b695116777b41fc2b8aaf7a

  • SHA512

    e525fddf3fd353b357b325b7a782ac16cc549be03685ee167b9ff85cd70d6a63f37745b2b5d1565b9b7be8ee13b399add62d78a3217c68b2bb99638689e9c5b2

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d53d7a3f7755dadc6f46eacc00494882222a9ea82b695116777b41fc2b8aaf7a

    • Size

      371KB

    • MD5

      ff8fa701d2186e1a6253c520528806cd

    • SHA1

      d4611dc0f0d260856a80035c3b7f01d1a68460eb

    • SHA256

      d53d7a3f7755dadc6f46eacc00494882222a9ea82b695116777b41fc2b8aaf7a

    • SHA512

      e525fddf3fd353b357b325b7a782ac16cc549be03685ee167b9ff85cd70d6a63f37745b2b5d1565b9b7be8ee13b399add62d78a3217c68b2bb99638689e9c5b2

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks