General

  • Target

    2a8cdd462fd0484d25bbbef4f02fea664fe95116b1b35824811e27dc8437dd4c

  • Size

    371KB

  • Sample

    241104-r5r71stqeq

  • MD5

    28cd6ca51844b2abdfe42c5a637b54f0

  • SHA1

    77c131bff8140131163ca93dfd1ca8202ddd9fd6

  • SHA256

    2a8cdd462fd0484d25bbbef4f02fea664fe95116b1b35824811e27dc8437dd4c

  • SHA512

    489365631a8e131ae15f8938f04a6b173f311bbf5ae6e4d917b9e2cfe77509b78136816b87b3f104717c1652f90bdacd4ea554b301108befdc57d50cbca6cde0

  • SSDEEP

    6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2a8cdd462fd0484d25bbbef4f02fea664fe95116b1b35824811e27dc8437dd4c

    • Size

      371KB

    • MD5

      28cd6ca51844b2abdfe42c5a637b54f0

    • SHA1

      77c131bff8140131163ca93dfd1ca8202ddd9fd6

    • SHA256

      2a8cdd462fd0484d25bbbef4f02fea664fe95116b1b35824811e27dc8437dd4c

    • SHA512

      489365631a8e131ae15f8938f04a6b173f311bbf5ae6e4d917b9e2cfe77509b78136816b87b3f104717c1652f90bdacd4ea554b301108befdc57d50cbca6cde0

    • SSDEEP

      6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks