General

  • Target

    ae0c716a4c308dde11a95dab167c340933b8ebe020fbb98ec432e2cdcb8aac59

  • Size

    438KB

  • Sample

    241105-a7teestkfn

  • MD5

    e7c93d74c3d092445b606faaa4da0da0

  • SHA1

    d38e1a79c7dccba424c707f71dfbd76909930218

  • SHA256

    ae0c716a4c308dde11a95dab167c340933b8ebe020fbb98ec432e2cdcb8aac59

  • SHA512

    e29f6df111f2cabc13593a74168f1fb0977d0b473666be4e614c7ec3e8515063787fe270c597a314e7da55ce17c742e2b59a2f10a9586014ee244240f07e9b74

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      ae0c716a4c308dde11a95dab167c340933b8ebe020fbb98ec432e2cdcb8aac59

    • Size

      438KB

    • MD5

      e7c93d74c3d092445b606faaa4da0da0

    • SHA1

      d38e1a79c7dccba424c707f71dfbd76909930218

    • SHA256

      ae0c716a4c308dde11a95dab167c340933b8ebe020fbb98ec432e2cdcb8aac59

    • SHA512

      e29f6df111f2cabc13593a74168f1fb0977d0b473666be4e614c7ec3e8515063787fe270c597a314e7da55ce17c742e2b59a2f10a9586014ee244240f07e9b74

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks