General

  • Target

    7d78be3ec31365117cac402cd61f4ebde14e39e4362fa6a351316db5dcc8486a

  • Size

    298KB

  • Sample

    241104-w2lchsvfrn

  • MD5

    8e35025175efe6c88f470211b07a5d4e

  • SHA1

    de27dc0583cc78caffa7eb37c7248db77ffe5388

  • SHA256

    7d78be3ec31365117cac402cd61f4ebde14e39e4362fa6a351316db5dcc8486a

  • SHA512

    d469920a6db6e175b5950f654026ccc07e145457b8e1e6634e78fc1c443b1eb9825da536eeae013a4b53e59addbde732712116dcb5f34378c9aa627d8334b052

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7d78be3ec31365117cac402cd61f4ebde14e39e4362fa6a351316db5dcc8486a

    • Size

      298KB

    • MD5

      8e35025175efe6c88f470211b07a5d4e

    • SHA1

      de27dc0583cc78caffa7eb37c7248db77ffe5388

    • SHA256

      7d78be3ec31365117cac402cd61f4ebde14e39e4362fa6a351316db5dcc8486a

    • SHA512

      d469920a6db6e175b5950f654026ccc07e145457b8e1e6634e78fc1c443b1eb9825da536eeae013a4b53e59addbde732712116dcb5f34378c9aa627d8334b052

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks