General

  • Target

    e87ad42871e83b55e830047f97c4349146e82956cba9a8d919edb7dca0035537

  • Size

    297KB

  • Sample

    241104-qxk83azlcy

  • MD5

    6f927052d70ede158763c015ea76e60f

  • SHA1

    d23aa52524c2abd6234cd3e0391b49e0cabc3fbe

  • SHA256

    e87ad42871e83b55e830047f97c4349146e82956cba9a8d919edb7dca0035537

  • SHA512

    1c1f49e6f074e188c8322b6f9c46a36c0f3f6d48c2f4c594847736942ac62152a05d72534f979cb84a118f4bd6d92f354c3d93f5509b5b9ba0143ac004736654

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      e87ad42871e83b55e830047f97c4349146e82956cba9a8d919edb7dca0035537

    • Size

      297KB

    • MD5

      6f927052d70ede158763c015ea76e60f

    • SHA1

      d23aa52524c2abd6234cd3e0391b49e0cabc3fbe

    • SHA256

      e87ad42871e83b55e830047f97c4349146e82956cba9a8d919edb7dca0035537

    • SHA512

      1c1f49e6f074e188c8322b6f9c46a36c0f3f6d48c2f4c594847736942ac62152a05d72534f979cb84a118f4bd6d92f354c3d93f5509b5b9ba0143ac004736654

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks