7b254cf126bc832cfc70656a88f2f781f801bd685cce2aa38b19b9ee8629c424

General
Target

7b254cf126bc832cfc70656a88f2f781f801bd685cce2aa38b19b9ee8629c424

Size

337KB

Sample

211021-x2l5gsafe8

Score
10 /10
MD5

73dfc990beb14e815d2161b1e1aa3b19

SHA1

849196027bf01f8d580afc5a3fed73d2be108e0b

SHA256

7b254cf126bc832cfc70656a88f2f781f801bd685cce2aa38b19b9ee8629c424

SHA512

befc7ec29ba843f5ff8e54c8a008f49e29e6771e7f0f17c96f97afb0f8dfa67325f3367700de02fc26329710f8c3c68096bfb67defa4c7bbf1a3656cde172c98

Malware Config

Extracted

Family redline
Botnet UDP
C2

45.9.20.182:52236

Targets
Target

7b254cf126bc832cfc70656a88f2f781f801bd685cce2aa38b19b9ee8629c424

MD5

73dfc990beb14e815d2161b1e1aa3b19

Filesize

337KB

Score
10 /10
SHA1

849196027bf01f8d580afc5a3fed73d2be108e0b

SHA256

7b254cf126bc832cfc70656a88f2f781f801bd685cce2aa38b19b9ee8629c424

SHA512

befc7ec29ba843f5ff8e54c8a008f49e29e6771e7f0f17c96f97afb0f8dfa67325f3367700de02fc26329710f8c3c68096bfb67defa4c7bbf1a3656cde172c98

Tags

Signatures

  • RedLine

    Description

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    Tags

  • RedLine Payload

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10