General
Target

5582_1647892436_8862.exe

Size

172KB

Sample

220325-h8fhysbga6

Score
10/10
MD5

bbc9b2e32cd420063e28f97a2c0120e5

SHA1

0e8253c7f0d1d82ad299e3301b12f649c7074297

SHA256

b7a2b920675c8bef9335ba279317eb15ddfa6961feccc08c1a99e3d2ff8e34c1

SHA512

2e8bf7d5dc406f2b0afd67e2a35805307da8930ace805ceeaff67b33258f2849decdaa59a48e9af9ac66d97803b1d27179e8c803ef86c63864e1aac418759581

Malware Config

Extracted

Family

redline

Botnet

1

C2

20.53.13.165:3335

Attributes
auth_value
7ed907c60301a0aea12a58314db264f5
Targets
Target

5582_1647892436_8862.exe

MD5

bbc9b2e32cd420063e28f97a2c0120e5

Filesize

172KB

Score
10/10
SHA1

0e8253c7f0d1d82ad299e3301b12f649c7074297

SHA256

b7a2b920675c8bef9335ba279317eb15ddfa6961feccc08c1a99e3d2ff8e34c1

SHA512

2e8bf7d5dc406f2b0afd67e2a35805307da8930ace805ceeaff67b33258f2849decdaa59a48e9af9ac66d97803b1d27179e8c803ef86c63864e1aac418759581

Tags

Signatures

  • RedLine

    Description

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    Tags

  • RedLine Payload

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          Score
                          10/10

                          behavioral1

                          Score
                          10/10

                          behavioral2

                          Score
                          10/10