General

  • Target

    0082805f42e4dbab6e87c153ebd12dbab37eb40cad5ede535e98444df8098745

  • Size

    297KB

  • Sample

    241104-sz21pssfmq

  • MD5

    3ee4e9d9f09deaab164afa926676eb00

  • SHA1

    fd855623f30f8a874e4cc3a46ee88ff0be7e4390

  • SHA256

    0082805f42e4dbab6e87c153ebd12dbab37eb40cad5ede535e98444df8098745

  • SHA512

    d2310759a88c06341c3fa1837551b067001abf9777ea9b7c169c14da2696069d44d51b5457087c80cb53d22cfa21840b11a2520eac4a7e64bf31c94154a9f1c8

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      0082805f42e4dbab6e87c153ebd12dbab37eb40cad5ede535e98444df8098745

    • Size

      297KB

    • MD5

      3ee4e9d9f09deaab164afa926676eb00

    • SHA1

      fd855623f30f8a874e4cc3a46ee88ff0be7e4390

    • SHA256

      0082805f42e4dbab6e87c153ebd12dbab37eb40cad5ede535e98444df8098745

    • SHA512

      d2310759a88c06341c3fa1837551b067001abf9777ea9b7c169c14da2696069d44d51b5457087c80cb53d22cfa21840b11a2520eac4a7e64bf31c94154a9f1c8

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks