General

  • Target

    40aa09f5d703a98e0a72bf3d1ac34fceb6d6992769deb0ecfe59eefab7a36af8

  • Size

    298KB

  • Sample

    241111-kvs81awldz

  • MD5

    5be201f19466370ef96bb3b3bfd1abd3

  • SHA1

    4af4d1208e72e4f9a655963da26acaae6fac5afa

  • SHA256

    40aa09f5d703a98e0a72bf3d1ac34fceb6d6992769deb0ecfe59eefab7a36af8

  • SHA512

    c2a2747bf46c50c871806206242abdadf30e5f949c0052ff3ab9996ddef2bc7ca8fb94acf422e5732df9c6de2a5e2223167eb80a20f565b4a2c0119c300a5e8d

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      40aa09f5d703a98e0a72bf3d1ac34fceb6d6992769deb0ecfe59eefab7a36af8

    • Size

      298KB

    • MD5

      5be201f19466370ef96bb3b3bfd1abd3

    • SHA1

      4af4d1208e72e4f9a655963da26acaae6fac5afa

    • SHA256

      40aa09f5d703a98e0a72bf3d1ac34fceb6d6992769deb0ecfe59eefab7a36af8

    • SHA512

      c2a2747bf46c50c871806206242abdadf30e5f949c0052ff3ab9996ddef2bc7ca8fb94acf422e5732df9c6de2a5e2223167eb80a20f565b4a2c0119c300a5e8d

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks