General

  • Target

    0451d6597bc5b7c9001bfa4ca06a87e5087d2adc0efea5ec45681fc21782d48f

  • Size

    370KB

  • Sample

    241104-rmqw8stmdp

  • MD5

    27b1d9b8e9474116dec6236cc992cfc7

  • SHA1

    d62307b076b717d3f2b9cee4fd981ad331e7b476

  • SHA256

    0451d6597bc5b7c9001bfa4ca06a87e5087d2adc0efea5ec45681fc21782d48f

  • SHA512

    dc5ea684c577cbded622991e3d80c23d4c777127205f01b50684a195432bc0369928d7147f80ab89f4940f2c63a14dba4af2e466aa333ab331b465d5f34a934f

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      0451d6597bc5b7c9001bfa4ca06a87e5087d2adc0efea5ec45681fc21782d48f

    • Size

      370KB

    • MD5

      27b1d9b8e9474116dec6236cc992cfc7

    • SHA1

      d62307b076b717d3f2b9cee4fd981ad331e7b476

    • SHA256

      0451d6597bc5b7c9001bfa4ca06a87e5087d2adc0efea5ec45681fc21782d48f

    • SHA512

      dc5ea684c577cbded622991e3d80c23d4c777127205f01b50684a195432bc0369928d7147f80ab89f4940f2c63a14dba4af2e466aa333ab331b465d5f34a934f

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks