General

  • Target

    8fb50f75437c6662b40096837d6b5af0775eeab03b90ccd809d93806a23743be

  • Size

    428KB

  • Sample

    241104-s473hsvmfk

  • MD5

    24d83c36b780a4332768df1e6fdb676d

  • SHA1

    cc621fa5ac2a33ab9e17aab125869a44a5999c62

  • SHA256

    8fb50f75437c6662b40096837d6b5af0775eeab03b90ccd809d93806a23743be

  • SHA512

    cb4d47886262270aedcfdd27615b4e56d12e001504395ba7f0570253de6e3a2923ac0d4daf0786bfa77219635e3d786a51689ad9d81aa1deff90464cb9655367

  • SSDEEP

    6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      8fb50f75437c6662b40096837d6b5af0775eeab03b90ccd809d93806a23743be

    • Size

      428KB

    • MD5

      24d83c36b780a4332768df1e6fdb676d

    • SHA1

      cc621fa5ac2a33ab9e17aab125869a44a5999c62

    • SHA256

      8fb50f75437c6662b40096837d6b5af0775eeab03b90ccd809d93806a23743be

    • SHA512

      cb4d47886262270aedcfdd27615b4e56d12e001504395ba7f0570253de6e3a2923ac0d4daf0786bfa77219635e3d786a51689ad9d81aa1deff90464cb9655367

    • SSDEEP

      6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks